61 lines
2.2 KiB
YAML
61 lines
2.2 KiB
YAML
version: '3.8'
|
|
|
|
services:
|
|
amigos-app:
|
|
image: gitea.nucleoriofrio.com/nucleo000/amigos-app:latest
|
|
container_name: amigos-app
|
|
environment:
|
|
- MONGO_HOST=mongodb-local
|
|
- PORT=3001
|
|
- NODE_ENV=production
|
|
depends_on:
|
|
- mongodb
|
|
restart: unless-stopped
|
|
networks:
|
|
- principal
|
|
- amigos-network
|
|
labels:
|
|
# Habilitar Traefik
|
|
- "traefik.enable=true"
|
|
|
|
# Router principal
|
|
- "traefik.http.routers.amigos-nucleoriofrio.rule=Host(`amigos.nucleoriofrio.com`)"
|
|
- "traefik.http.routers.amigos-nucleoriofrio.entrypoints=websecure"
|
|
- "traefik.http.routers.amigos-nucleoriofrio.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.amigos-nucleoriofrio.service=amigos-nucleoriofrio-service"
|
|
|
|
# Service (puerto interno del contenedor)
|
|
- "traefik.http.services.amigos-nucleoriofrio-service.loadbalancer.server.port=3001"
|
|
|
|
# Middleware de autenticación ESPECÍFICO para amigos-app
|
|
- "traefik.http.middlewares.amigos-authentik.forwardauth.address=https://lvl0.nucleoriofrio.com/outpost.goauthentik.io/auth/traefik"
|
|
- "traefik.http.middlewares.amigos-authentik.forwardauth.trustForwardHeader=true"
|
|
- "traefik.http.middlewares.amigos-authentik.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-groups,X-authentik-entitlements,Set-Cookie"
|
|
|
|
# Middleware de headers ESPECÍFICO para amigos-app
|
|
- "traefik.http.middlewares.amigos-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
|
|
- "traefik.http.middlewares.amigos-headers.headers.customrequestheaders.X-Forwarded-Scheme=https"
|
|
|
|
# Aplicar SOLO los middlewares específicos de este contenedor
|
|
- "traefik.http.routers.amigos-nucleoriofrio.middlewares=amigos-authentik,amigos-headers"
|
|
|
|
mongodb:
|
|
image: mongo:latest
|
|
container_name: mongodb-local
|
|
expose:
|
|
- "27017"
|
|
environment:
|
|
- MONGO_INITDB_ROOT_USERNAME=admin
|
|
- MONGO_INITDB_ROOT_PASSWORD=MongoPass2024!
|
|
- MONGO_INITDB_DATABASE=testdb
|
|
|
|
restart: unless-stopped
|
|
networks:
|
|
- amigos-network
|
|
|
|
networks:
|
|
principal:
|
|
external: true
|
|
amigos-network:
|
|
driver: bridge
|