colin
/
n8n
generated from Nixius/template
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: add n8n service configuration with docker and stack files
ci/woodpecker/push/woodpecker Pipeline failed Details

This commit is contained in:
Leopere 2025-04-04 14:07:24 -04:00
parent 52c441aabd
commit d9334dd427
1 changed files with 17 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
stack.production.yml
View File

@ -22,7 +22,7 @@ services:
- traefik - traefik
labels: labels:
- traefik.enable=true - traefik.enable=true
- traefik.http.routers.production_n8n.rule=Host(`n8n.nixc.us`) - traefik.http.routers.production_n8n.rule=Host(n8n.nixc.us)
- traefik.http.routers.production_n8n.entrypoints=websecure - traefik.http.routers.production_n8n.entrypoints=websecure
- traefik.http.routers.production_n8n.tls=true - traefik.http.routers.production_n8n.tls=true
- traefik.http.routers.production_n8n.tls.certresolver=letsencryptresolver - traefik.http.routers.production_n8n.tls.certresolver=letsencryptresolver
@ -38,31 +38,23 @@ services:
placement: placement:
constraints: constraints:
- node.hostname == macmini1 - node.hostname == macmini1
# update_config:
# delay: 0s
# parallelism: 2
# order: start-first
labels: labels:
traefik.enable: "true" traefik.enable: true
traefik.http.routers.production_midtownplaydio.rule: "Host(`midtownplaydio.nixc.us`)" traefik.http.routers.production_midtownplaydio.rule: Host(midtownplaydio.nixc.us)
traefik.http.routers.production_midtownplaydio.entrypoints: "websecure" traefik.http.routers.production_midtownplaydio.entrypoints: websecure
traefik.http.routers.production_midtownplaydio.tls: "true" traefik.http.routers.production_midtownplaydio.tls: true
traefik.http.routers.production_midtownplaydio.tls.certresolver: "letsencryptresolver" traefik.http.routers.production_midtownplaydio.tls.certresolver: letsencryptresolver
traefik.http.routers.production_midtownplaydio.middlewares: "secure-headers" traefik.http.routers.production_midtownplaydio.middlewares: secure-headers
traefik.http.services.production_midtownplaydio.loadbalancer.server.port: "3000" traefik.http.services.production_midtownplaydio.loadbalancer.server.port: 3000
traefik.docker.network: "traefik" traefik.docker.network: traefik
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.path: "/health"
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.interval: "30s"
# traefik.http.services.production_midtownplaydio.loadbalancer.healthcheck.timeout: "5s"
# Security headers middleware # Security headers middleware
traefik.http.middlewares.secure-headers.headers.stsSeconds: 63072000 traefik.http.middlewares.secure-headers.headers.stsSeconds: 63072000
traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: "true" traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: true
traefik.http.middlewares.secure-headers.headers.stsPreload: "true" traefik.http.middlewares.secure-headers.headers.stsPreload: true
traefik.http.middlewares.secure-headers.headers.forceSTSHeader: "true" traefik.http.middlewares.secure-headers.headers.forceSTSHeader: true
traefik.http.middlewares.secure-headers.headers.frameDeny: "true" traefik.http.middlewares.secure-headers.headers.frameDeny: true
traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: "true" traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: true
traefik.http.middlewares.secure-headers.headers.browserXssFilter: "true" traefik.http.middlewares.secure-headers.headers.browserXssFilter: true
traefik.http.middlewares.secure-headers.headers.referrerPolicy: "no-referrer" traefik.http.middlewares.secure-headers.headers.referrerPolicy: no-referrer
traefik.http.middlewares.secure-headers.headers.featurePolicy: "camera 'none'; geolocation 'none'; microphone 'none'; payment 'none'; usb 'none'; vr 'none'" traefik.http.middlewares.secure-headers.headers.featurePolicy: camera none; geolocation none; microphone none; payment none; usb none; vr none