services-reverse/docker-compose.yml

49 lines
1.1 KiB
YAML

name: reverse
volumes:
certs:
acme:
html:
networks:
proxy-tier:
services:
# proxy
reverse_proxy:
build: ./images/proxy
restart: always
labels:
com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
volumes:
- certs:/etc/nginx/certs:ro
- ./vhost.d/:/etc/nginx/vhost.d:ro
- html:/usr/share/nginx/html
- /var/run/docker.sock:/tmp/docker.sock:ro
ports:
- 80:80
- 443:443
networks:
- proxy-tier
environment:
- ENABLE_IPV6=true
- SHA1_UPSTREAM_NAME=true
- TRUST_DOWNSTREAM_PROXY=false
- RESOLVERS=8.8.8.8 8.8.4.4 [2001:4860:4860::8888] [2001:4860:4860::8844] valid=300s ipv6=on
# letsencrypt agent
letsencrypt-companion:
image: docker.io/nginxproxy/acme-companion
restart: always
volumes:
- certs:/etc/nginx/certs
- acme:/etc/acme.sh
- ./vhost.d:/etc/nginx/vhost.d
- html:/usr/share/nginx/html
- /var/run/docker.sock:/var/run/docker.sock:ro
networks:
- proxy-tier
depends_on:
- reverse_proxy
environment:
- DEFAULT_EMAIL=${ADMIN_EMAIL}