diff options
| author | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 15:27:50 -0600 |
|---|---|---|
| committer | Jenniferplusplus <contact@jenniferplusplus.com> | 2023-11-12 15:27:50 -0600 |
| commit | 6054b96d9b02ab8c18100984f0570c328c2904a2 (patch) | |
| tree | d2e6e58c67a9fb63b7c903f64acc9156c1b2e329 /docker-compose.yml | |
| parent | 2b65cf918a98455e360798cb6b75db58860cbf54 (diff) | |
| download | sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.tar.gz sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.tar.bz2 sandcastles-6054b96d9b02ab8c18100984f0570c328c2904a2.zip | |
configure traefik and smallstep
Diffstat (limited to 'docker-compose.yml')
| -rw-r--r-- | docker-compose.yml | 38 |
1 files changed, 26 insertions, 12 deletions
diff --git a/docker-compose.yml b/docker-compose.yml index 043bc52..cf641da 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -8,28 +8,42 @@ services: - './volumes/root-ca:/home/step' environment: - DOCKER_STEPCA_INIT_NAME=Letterbook Sandcastles - - DOCKER_STEPCA_INIT_DNS_NAMES=localhost,root-ca + - DOCKER_STEPCA_INIT_DNS_NAMES=root-ca.castle,root-ca,localhost - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true ports: - "9000:9000" + networks: + default: + aliases: + - root-ca.castle proxy: - # Replace with traefik - image: busybox:1.36 - command: '/bin/sh -c "trap : TERM INT; sleep infinity & wait"' + image: traefik:v2.5 + volumes: + - /var/run/docker.sock:/var/run/docker.sock + - ./volumes/proxy/:/etc/traefik/ + ports: + - '80:80' + - '443:443' networks: default: - fediverse: aliases: - - mastodon.castle - - firefish.castle - - letterbook.castle + - dashboard.castle # the traefik monitoring dashboard + - host.castle # proxy to a service running on the docker host - client: - image: busybox:1.36 - networks: - - fediverse + fingerprint: # get the fingerprint of the CA root certificate, so you can add it to system trust stores + profiles: + - trust + image: smallstep/step-cli:0.25.0 + volumes: + - './volumes/root-ca/certs:/home/step/certs:ro' + command: + - step + - certificate + - fingerprint + - /home/step/certs/root_ca.crt networks: + default: fediverse:
\ No newline at end of file |