diff --git a/docker-compose.yml b/docker-compose.yml index 372dd37..a88b2f4 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -5,6 +5,19 @@ services: # Or the GHCR image: # image: ghcr.io/booklore-app/booklore:latest container_name: booklore + networks: + - traefik-public + - booklore + labels: + - "traefik.enable=true" + - "traefik.http.routers.books.rule=Host(`vault.speerfam.net`)" + - "traefik.http.routers.books.entrypoints=websecure" + - "traefik.http.routers.books.tls.certresolver=myresolver" + + # Pulling the security rules dynamically from our file provider setup + - "traefik.http.routers.books.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file" + - "traefik.http.services.books.loadbalancer.server.port=6060" + environment: - USER_ID=0 - GROUP_ID=0 @@ -29,6 +42,8 @@ services: mariadb: image: lscr.io/linuxserver/mariadb:11.4.5 container_name: mariadb + networks: + - booklore environment: - PUID=1000 - PGID=1000 @@ -44,4 +59,10 @@ services: test: [ "CMD", "mariadb-admin", "ping", "-h", "localhost" ] interval: 5s timeout: 5s - retries: 10 \ No newline at end of file + retries: 10 + +networks: + traefik-public: + external: true + booklore: + external: false \ No newline at end of file