45 lines
2.1 KiB
YAML
45 lines
2.1 KiB
YAML
networks:
|
|
traefik:
|
|
external: true
|
|
|
|
services:
|
|
midtownplaydio:
|
|
image: git.nixc.us/colin/midtownplaydio:production
|
|
networks:
|
|
- traefik
|
|
deploy:
|
|
replicas: 1
|
|
placement:
|
|
constraints:
|
|
- node.hostname == macmini1
|
|
|
|
# update_config:
|
|
# delay: 0s
|
|
# parallelism: 2
|
|
# order: start-first
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.http.routers.production_midtownplaydio.rule: "Host(`midtownplaydio.nixc.us`)"
|
|
traefik.http.routers.production_midtownplaydio.entrypoints: "websecure"
|
|
traefik.http.routers.production_midtownplaydio.tls: "true"
|
|
traefik.http.routers.production_midtownplaydio.tls.certresolver: "letsencryptresolver"
|
|
traefik.http.services.production_midtownplaydio.loadbalancer.server.port: "3000"
|
|
traefik.docker.network: "traefik"
|
|
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.path: "/health"
|
|
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.interval: "30s"
|
|
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.timeout: "5s"
|
|
|
|
# Security headers middleware
|
|
traefik.http.middlewares.secure-headers.headers.stsSeconds: 63072000
|
|
traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: "true"
|
|
traefik.http.middlewares.secure-headers.headers.stsPreload: "true"
|
|
traefik.http.middlewares.secure-headers.headers.forceSTSHeader: "true"
|
|
traefik.http.middlewares.secure-headers.headers.frameDeny: "true"
|
|
traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: "true"
|
|
traefik.http.middlewares.secure-headers.headers.browserXssFilter: "true"
|
|
traefik.http.middlewares.secure-headers.headers.referrerPolicy: "no-referrer"
|
|
traefik.http.middlewares.secure-headers.headers.featurePolicy: "camera 'none'; geolocation 'none'; microphone 'none'; payment 'none'; usb 'none'; vr 'none'"
|
|
|
|
# Attach security headers middleware to the router
|
|
traefik.http.routers.production_midtownplaydio.middlewares: "secure-headers"
|