56 lines
2.0 KiB
YAML
56 lines
2.0 KiB
YAML
#### NETWORKS
|
|
networks:
|
|
traefik_front_network:
|
|
external: true
|
|
|
|
#### SERVICES
|
|
services:
|
|
vault:
|
|
container_name: vault-app
|
|
hostname: vault-app
|
|
image: hashicorp/vault:latest
|
|
environment:
|
|
VAULT_ADDR: "https://vault.tips-of-mine.com"
|
|
VAULT_API_ADDR: "https://vault.tips-of-mine.com"
|
|
VAULT_ADDRESS: "https://vault.tips-of-mine.com"
|
|
# VAULT_UI: true
|
|
# VAULT_TOKEN:
|
|
TZ: "Europe/Paris"
|
|
ports:
|
|
- "8200:8200"
|
|
- "8201:8201"
|
|
networks:
|
|
- traefik_front_network
|
|
restart: always
|
|
volumes:
|
|
- ./logs:/vault/logs/:rw
|
|
- ./data:/vault/data/:rw
|
|
- ./config:/vault/config/:rw
|
|
- ./certs:/certs/:rw
|
|
- ./file:/vault/file/:rw
|
|
- ./policy:/vault/policy/:rw
|
|
cap_add:
|
|
- IPC_LOCK
|
|
entrypoint: vault server -config /vault/config/config.hcl
|
|
labels:
|
|
- "com.centurylinklabs.watchtower.enable=true"
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=traefik_front_network"
|
|
# HTTP
|
|
- "traefik.http.routers.vault-http.rule=Host(`vault.tips-of-mine.com`)"
|
|
- "traefik.http.routers.vault-http.entrypoints=http"
|
|
- "traefik.http.routers.vault-http.priority=39"
|
|
# HTTPS
|
|
- "traefik.http.routers.vault-https.rule=Host(`vault.tips-of-mine.com`)"
|
|
- "traefik.http.routers.vault-https.entrypoints=https"
|
|
- "traefik.http.routers.vault-https.tls=true"
|
|
- "traefik.http.routers.vault-https.priority=40"
|
|
# Middleware
|
|
# Service
|
|
- "traefik.http.services.vault-https-service.loadbalancer.server.port=8200"
|
|
# - "traefik.http.services.vault-https-service.loadbalancer.server.scheme=https"
|
|
# - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.hostname=vault.tips-of-mine.com"
|
|
# - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.method=foobar"
|
|
# - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.timeout=10"
|
|
# - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.interval=30"
|