docker-compose.inc.yml

  # ------------------------------------------------------------------------------
  router:
    extends:
      file: ${DCAPE_ROOT}/docker-compose.dcape.yml
      service: template-traefik
    image: traefik:${TRAEFIK_VER}
    ports:
      - "${TRAEFIK_LISTEN}:80"
      - "${TRAEFIK_LISTEN_SSL}:443"
    labels:
      - "traefik.http.routers.dashboard.rule=Host(`${DCAPE_HOST}`) && (PathPrefix(`/dashboard/`) || PathPrefix(`/api/`))"
      - "traefik.http.routers.dashboard.service=api@internal"
      - "traefik.http.routers.dashboard.middlewares=narra"
      - "traefik.http.routers.ping.rule=Host(`${DCAPE_HOST}`) && PathPrefix(`/ping`)"
      - "traefik.http.routers.ping.service=ping@internal"
      # HSTS basic settings for shared using (like Nextcloud required and etc.).
      - "traefik.http.middlewares.hsts.headers.stsSeconds=15552000"
      - "traefik.http.middlewares.hsts.headers.stsIncludeSubdomains=true"
      - "traefik.http.middlewares.hsts.headers.stsPreload=true"
      - "traefik.http.middlewares.hsts.headers.forceSTSHeader=true"
      - "prometheus.io/scrape=true"
      - "prometheus.io/port=8080"
      - "prometheus.io/extra-labels=job:traefik"
    env_file:
      - ${DCAPE_VAR}/traefik/traefik.env
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ${DCAPE_VAR}/traefik:/etc/traefik
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
      - /etc/ssl/certs:/etc/ssl/certs:ro
    networks:
      intra:
      default:
        aliases:
          - ${TRAEFIK_ALIAS}