davejansen/ghost-matomo-mariadb-traefik-ssl
1
0
Fork 0
Code Issues Pull Requests Activity

WIP

Browse Source
This commit is contained in:
Dave Jansen
2019-02-16 18:44:33 +09:00
parent 3b51aa1fe4
commit 38b4fc5e6c
2 changed files with 21 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/traefik.toml
View File

@@ -6,12 +6,14 @@ defaultEntryPoints = ["http", "https"]
[entryPoints] [entryPoints]
[entryPoints.http] [entryPoints.http]
address = ":80" address = ":80"
# Uncomment the following two lines to redirect HTTP to HTTPS. # Uncomment the following two lines to redirect HTTP to HTTPS.
#[entryPoints.http.redirect] #[entryPoints.http.redirect]
#entryPoint = "https" #entryPoint = "https"
[entryPoints.https] [entryPoints.https]
address = ":443" address = ":443"
[entryPoints.https.tls] [entryPoints.https.tls]
# These options are for Traefik's integration with Docker. # These options are for Traefik's integration with Docker.
[docker] [docker]
@@ -20,6 +22,8 @@ domain = "docker.localhost"
watch = true watch = true
exposedByDefault = false exposedByDefault = false
[api]
# These options are for Traefik's integration with Let's Encrypt. # These options are for Traefik's integration with Let's Encrypt.
# Your certificates are stored inside /acme.json inside the container, # Your certificates are stored inside /acme.json inside the container,
# which is /root/compose/acme.json on your server. # which is /root/compose/acme.json on your server.

25
docker-compose.yml
View File

@@ -20,7 +20,7 @@ services:
traefik: traefik:
# https://hub.docker.com/_/traefik/ # https://hub.docker.com/_/traefik/
image: traefik:alpine image: traefik:alpine
command: --api --docker --acme.email="${ACME_EMAIL}" command: --web --docker --acme.email="${ACME_EMAIL}"
restart: always restart: always
networks: networks:
- backend - backend
@@ -33,11 +33,12 @@ services:
# Map port 80 and 443 on the host to this container. # Map port 80 and 443 on the host to this container.
- "80:80" - "80:80"
- "443:443" - "443:443"
#- "8000:8080" # Traefik Dashboard
labels: labels:
- "traefik.docker.network=frontend" - "traefik.docker.network=frontend"
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.frontend.rule=Host:${TRAEFIK_DOMAINS}; PathPrefixStrip:/traefik/" - "traefik.frontend.rule=Host:${TRAEFIK_DOMAINS}"
- "traefik.port=80" - "traefik.port=8080"
- "traefik.protocol=http" - "traefik.protocol=http"
# Remove next line to disable login prompt for the dashboard. # Remove next line to disable login prompt for the dashboard.
#- "traefik.frontend.auth.basic=${BASIC_AUTH}" #- "traefik.frontend.auth.basic=${BASIC_AUTH}"
@@ -71,8 +72,8 @@ services:
MYSQL_USER: ${MATOMO_DB_USER} MYSQL_USER: ${MATOMO_DB_USER}
MYSQL_PASSWORD: ${MATOMO_DB_PASSWORD} MYSQL_PASSWORD: ${MATOMO_DB_PASSWORD}
matomo: ghost:
image: matomo:latest image: ghost:latest
links: links:
- db - db
networks: networks:
@@ -80,14 +81,20 @@ services:
- frontend - frontend
volumes: volumes:
# To allow you to view/edit Matomo configuration files: # To allow you to view/edit Matomo configuration files:
- ./config/ghost:/var/www/html/config:rw - ./content:/var/lib/ghost/content:rw
- ./logs:/var/www/html/logs #- ./logs:/var/www/html/logs
labels: labels:
- "traefik.docker.network=frontend" - "traefik.docker.network=frontend"
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.frontend.rule=Host:${DOMAINS}" - "traefik.frontend.rule=Host:${DOMAINS}"
- "traefik.port=80" - "traefik.port=2368"
- "traefik.protocol=http" - "traefik.protocol=http"
environment:
database__client: mysql
database__connection__host: db
database__connection__user: ${MATOMO_DB_USER}
database__connection__password: ${MATOMO_DB_PASSWORD}
database__connection__database: ${MATOMO_DB_NAME}
# Uncomment the next line to enable HSTS header. # Uncomment the next line to enable HSTS header.
#- "traefik.frontend.headers.STSSeconds=15768000" #- "traefik.frontend.headers.STSSeconds=15768000"
@@ -112,7 +119,7 @@ services:
labels: labels:
- "traefik.docker.network=frontend" - "traefik.docker.network=frontend"
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.frontend.rule=Host:${MATOMO_DOMAINS}; PathPrefixStrip:/matomo/" - "traefik.frontend.rule=Host:${MATOMO_DOMAINS}"
- "traefik.port=80" - "traefik.port=80"
- "traefik.protocol=http" - "traefik.protocol=http"
# Uncomment the next line to enable HSTS header. # Uncomment the next line to enable HSTS header.