TK421Noah

Untitled

Oct 2nd, 2021 (edited)
340
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 3.20 KB | None | 0 0
  1.  authelia:
  2.     image: authelia/authelia
  3.     container_name: authelia
  4.     volumes:
  5.      - /opt/appdata/authelia:/config
  6.     networks:
  7.      - net
  8.     labels:
  9.      - "traefik.enable=true"
  10.       - "traefik.http.routers.authelia.rule=Host(`login.example.com`)"
  11.       - "traefik.http.routers.authelia.entrypoints=https"
  12.       - "traefik.http.routers.authelia.tls=true"
  13.       - "traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://login.example.com/"
  14.       - "traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true"
  15.       - "traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email"
  16.       - "traefik.http.middlewares.authelia-basic.forwardauth.address=http://authelia:9091/api/verify?auth=basic"
  17.       - "traefik.http.middlewares.authelia-basic.forwardauth.trustForwardHeader=true"
  18.       - "traefik.http.middlewares.authelia-basic.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email"
  19.     expose:
  20.      - 9091
  21.     restart: unless-stopped
  22.     environment:
  23.      - TZ=America/Denver
  24.  
  25.   heimdall:
  26.     image: linuxserver/heimdall
  27.     container_name: heimdall
  28.     volumes:
  29.      - /opt/appdata/heimdall/config:/config
  30.     networks:
  31.      - net
  32.     labels:
  33.      - 'traefik.enable=true'
  34.       - 'traefik.http.routers.heimdall.rule=Host(`heimdall.example.com`)'
  35.       - 'traefik.http.routers.heimdall.entrypoints=https'
  36.       - 'traefik.http.routers.heimdall.tls=true'
  37.       - 'traefik.http.routers.heimdall.middlewares=authelia-basic@docker'
  38.     expose:
  39.      - 443
  40.     restart: unless-stopped
  41.     environment:
  42.      - PUID=1000
  43.       - PGID=1000
  44.       - TZ=America/Denver
  45.  
  46.   traefik:
  47.     image: "traefik:v2.2"
  48.     container_name: "traefik"
  49.     command:
  50.      #- "--log.level=DEBUG"
  51.       - "--api.insecure=true"
  52.       - "--providers.docker=true"
  53.       - "--providers.docker.exposedbydefault=false"
  54.       - "--entrypoints.http=true"
  55.       - "--entrypoints.http.address=:80"
  56.       - "--entrypoints.http.http.redirections.entrypoint.to=https"
  57.       - "--entrypoints.http.http.redirections.entrypoint.scheme=https"
  58.       - "--entrypoints.https=true"
  59.       - "--entrypoints.https.address=:443"
  60.       - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
  61.       - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=http"
  62.       #- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
  63.       - "[email protected]"
  64.       - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
  65.       - 'traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://login.example.com/'
  66.       - 'traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true'
  67.       - 'traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=Remote-User, Remote-Groups, Remote-Name, Remote-Email'
  68.     networks:
  69.      - net
  70.     ports:
  71.      - "80:80"
  72.       - "443:443"
  73.       - "8080:8080"
  74.     volumes:
  75.      - "/opt/appdata/traefik/letsencrypt:/letsencrypt"
  76.       - "/var/run/docker.sock:/var/run/docker.sock:ro"
Add Comment
Please, Sign In to add comment