123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152 |
- version: "3.3"
- services:
- proxy:
- image: traefik:v2.9
- networks:
- - ${TRAEFIK_PUBLIC_NETWORK?Variable not set}
- - default
- volumes:
- - /var/run/docker.sock:/var/run/docker.sock
- command:
- # Enable Docker in Traefik, so that it reads labels from Docker services
- - --providers.docker
- # Add a constraint to only use services with the label for this stack
- # from the env var TRAEFIK_TAG
- - --providers.docker.constraints=Label(`traefik.constraint-label-stack`, `${TRAEFIK_TAG?Variable not set}`)
- # Do not expose all Docker services, only the ones explicitly exposed
- - --providers.docker.exposedbydefault=false
- # Enable Docker Swarm mode
- - --providers.docker.swarmmode
- # Enable the access log, with HTTP requests
- - --accesslog
- # Enable the Traefik log, for configurations and errors
- - --log
- # Enable the Dashboard and API
- - --api
- deploy:
- placement:
- constraints:
- - node.role == manager
- labels:
- # Enable Traefik for this service, to make it available in the public network
- - traefik.enable=true
- # Use the traefik-public network (declared below)
- - traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK?Variable not set}
- # Use the custom label "traefik.constraint-label=traefik-public"
- # This public Traefik will only use services with this label
- - traefik.constraint-label=${TRAEFIK_PUBLIC_TAG?Variable not set}
- # traefik-http set up only to use the middleware to redirect to https
- - traefik.http.middlewares.${STACK_NAME?Variable not set}-https-redirect.redirectscheme.scheme=https
- - traefik.http.middlewares.${STACK_NAME?Variable not set}-https-redirect.redirectscheme.permanent=true
- # Handle host with and without "www" to redirect to only one of them
- # Uses environment variable DOMAIN
- # To disable www redirection remove the Host() you want to discard, here and
- # below for HTTPS
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-http.rule=Host(`${DOMAIN?Variable not set}`) || Host(`www.${DOMAIN?Variable not set}`)
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-http.entrypoints=http
- # traefik-https the actual router using HTTPS
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-https.rule=Host(`${DOMAIN?Variable not set}`) || Host(`www.${DOMAIN?Variable not set}`)
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-https.entrypoints=https
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-https.tls=true
- # Use the "le" (Let's Encrypt) resolver created below
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-https.tls.certresolver=le
- # Define the port inside of the Docker service to use
- - traefik.http.services.${STACK_NAME?Variable not set}-proxy.loadbalancer.server.port=80
- # Handle domain with and without "www" to redirect to only one
- # To disable www redirection remove the next line
- - traefik.http.middlewares.${STACK_NAME?Variable not set}-www-redirect.redirectregex.regex=^https?://(www.)?(${DOMAIN?Variable not set})/(.*)
- # Redirect a domain with www to non-www
- # To disable it remove the next line
- - traefik.http.middlewares.${STACK_NAME?Variable not set}-www-redirect.redirectregex.replacement=https://${DOMAIN?Variable not set}/$${3}
- # Redirect a domain without www to www
- # To enable it remove the previous line and uncomment the next
- # - traefik.http.middlewares.${STACK_NAME}-www-redirect.redirectregex.replacement=https://www.${DOMAIN}/$${3}
- # Middleware to redirect www, to disable it remove the next line
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-https.middlewares=${STACK_NAME?Variable not set}-www-redirect
- # Middleware to redirect www, and redirect HTTP to HTTPS
- # to disable www redirection remove the section: ${STACK_NAME?Variable not set}-www-redirect,
- - traefik.http.routers.${STACK_NAME?Variable not set}-proxy-http.middlewares=${STACK_NAME?Variable not set}-www-redirect,${STACK_NAME?Variable not set}-https-redirect
- queue:
- image: rabbitmq:3
- # Using the below image instead is required to enable the "Broker" tab in the flower UI:
- # image: rabbitmq:3-management
- #
- # You also have to change the flower command
-
- flower:
- image: mher/flower:0.9.7
- networks:
- - ${TRAEFIK_PUBLIC_NETWORK?Variable not set}
- - default
- env_file:
- - .env
- command:
- - "--broker=amqp://guest@queue:5672//"
- # For the "Broker" tab to work in the flower UI, uncomment the following command argument,
- # and change the queue service's image as well
- # - "--broker_api=http://guest:guest@queue:15672/api//"
- deploy:
- labels:
- - traefik.enable=true
- - traefik.docker.network=${TRAEFIK_PUBLIC_NETWORK?Variable not set}
- - traefik.constraint-label=${TRAEFIK_PUBLIC_TAG?Variable not set}
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-http.rule=Host(`flower.${DOMAIN?Variable not set}`)
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-http.entrypoints=http
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-http.middlewares=${STACK_NAME?Variable not set}-https-redirect
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-https.rule=Host(`flower.${DOMAIN?Variable not set}`)
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-https.entrypoints=https
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-https.tls=true
- - traefik.http.routers.${STACK_NAME?Variable not set}-flower-https.tls.certresolver=le
- - traefik.http.services.${STACK_NAME?Variable not set}-flower.loadbalancer.server.port=5555
-
- backend:
- image: '${DOCKER_IMAGE_BACKEND?Variable not set}:${TAG-latest}'
- env_file:
- - .env
- environment:
- - SERVER_NAME=${DOMAIN?Variable not set}
- - SERVER_HOST=https://${DOMAIN?Variable not set}
- # Allow explicit env var override for tests
- - SMTP_HOST=${SMTP_HOST}
- build:
- context: ./backend
- dockerfile: backend.dockerfile
- args:
- INSTALL_DEV: ${INSTALL_DEV-false}
- deploy:
- labels:
- - traefik.enable=true
- - traefik.constraint-label-stack=${TRAEFIK_TAG?Variable not set}
- - traefik.http.routers.${STACK_NAME?Variable not set}-backend-http.rule=PathPrefix(`/api`) || PathPrefix(`/docs`) || PathPrefix(`/redoc`)
- - traefik.http.services.${STACK_NAME?Variable not set}-backend.loadbalancer.server.port=80
-
- gpuceleryworker:
- image: '${DOCKER_IMAGE_CELERYWORKER?Variable not set}:${TAG-latest}'
- depends_on:
- - queue
- env_file:
- - .env
- environment:
- - SERVER_NAME=${DOMAIN?Variable not set}
- - SERVER_HOST=https://${DOMAIN?Variable not set}
- # Allow explicit env var override for tests
- - SMTP_HOST=${SMTP_HOST?Variable not set}
- build:
- context: ./backend
- dockerfile: gpuceleryworker.dockerfile
- args:
- INSTALL_DEV: ${INSTALL_DEV-false}
-
- networks:
- traefik-public:
- # Allow setting it to false for testing
- external: true
|