81 lines
2.7 KiB
YAML
81 lines
2.7 KiB
YAML
---
|
|
|
|
services:
|
|
geoipupdate:
|
|
image: "maxmindinc/geoipupdate:${GEOIPUPDATE_TAG:?GEOIPUPDATE_TAG is not configured}"
|
|
restart: unless-stopped
|
|
volumes:
|
|
- "geoip:/usr/share/GeoIP"
|
|
environment:
|
|
GEOIPUPDATE_EDITION_IDS: "GeoLite2-City GeoLite2-ASN"
|
|
GEOIPUPDATE_FREQUENCY: "8"
|
|
GEOIPUPDATE_ACCOUNT_ID: "${GEOIPUPDATE_ACCOUNT_ID:?MaxMind GeoIP account ID required}"
|
|
GEOIPUPDATE_LICENSE_KEY_FILE: /run/secrets/geoip_license_key
|
|
secrets:
|
|
- geoip_license_key
|
|
|
|
postgresql:
|
|
image: docker.io/library/postgres:${POSTGRES_TAG:?POSTGRES_TAG is not configured}
|
|
networks:
|
|
- backend
|
|
|
|
redis:
|
|
image: docker.io/library/redis:${REDIS_TAG:?REDIS_TAG is not configured}
|
|
networks:
|
|
- backend
|
|
|
|
server:
|
|
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:?AUTHENTIK_TAG is not configured}
|
|
ports: []
|
|
volumes:
|
|
- media:/media
|
|
- ./data/authentik/custom-templates:/templates
|
|
- geoip:/geoip
|
|
networks:
|
|
- backend
|
|
- dokploy-network
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=dokploy-network"
|
|
|
|
- "traefik.http.services.sso-server.loadbalancer.server.port=9443" # set port the container listenes to
|
|
- "traefik.http.services.sso-server.loadbalancer.server.scheme=https"
|
|
|
|
- "traefik.http.routers.sso-server-web.rule=Host(`${PUBLIC_DOMAIN}`)"
|
|
- "traefik.http.routers.sso-server-web.service=sso-server@docker"
|
|
- "traefik.http.routers.sso-server-web.entrypoints=web"
|
|
- "traefik.http.routers.sso-server-web.middlewares=redirect-to-https@file"
|
|
|
|
- "traefik.http.routers.sso-server-websecure.rule=Host(`${PUBLIC_DOMAIN}`)" # change hostname!
|
|
- "traefik.http.routers.sso-server-websecure.service=sso-server@docker"
|
|
- "traefik.http.routers.sso-server-websecure.entrypoints=websecure"
|
|
- "traefik.http.routers.sso-server-websecure.tls=true"
|
|
- "traefik.http.routers.sso-server-websecure.tls.options=modern@file"
|
|
- "traefik.http.routers.sso-server-websecure.tls.certresolver=acmeDns"
|
|
- "traefik.http.routers.sso-server-websecure.tls.domains[0].main=${TLS_DOMAIN}"
|
|
- "traefik.http.routers.sso-server-websecure.middlewares=secHeaders@file, hsts-header@file"
|
|
|
|
|
|
worker:
|
|
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:?AUTHENTIK_TAG is not configured}
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- media:/media
|
|
- certs:/certs
|
|
- ./data/authentik/custom-templates:/templates
|
|
- geoip:/geoip
|
|
networks:
|
|
- backend
|
|
|
|
volumes:
|
|
geoip:
|
|
driver: local
|
|
media:
|
|
driver: local
|
|
certs:
|
|
driver: local
|
|
|
|
networks:
|
|
backend:
|
|
dokploy-network:
|
|
external: true
|