traefik

nextcloud/docker-compose.yml

@@ -5,8 +5,6 @@ services:
     image: nextcloud:stable
     container_name: nextcloud
     restart: unless-stopped
-    ports:
-      - 8082:80
     volumes:
       - nc_data:/var/www/html
       - apache2:/etc/apache2
@@ -14,6 +12,7 @@ services:
     networks:
       - redisnet
       - dbnet
+      - traefiknet
     environment:
       - REDIS_HOST=redis
       - MYSQL_HOST=db
@@ -23,6 +22,12 @@ services:
     depends_on:
       - db
       - redis
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.nextcloud.rule=Host(`nctest.pnt.cloud`)"
+      - "traefik.http.routers.nextcloud.entrypoints=websecure"
+      - "traefik.http.routers.nextcloud.tls.certresolver=myresolver"
+      - "traefik.http.services.nextcloud.loadbalancer.server.port=80"
 
   redis:
     image: redis:alpine
@@ -31,6 +36,25 @@ services:
     networks:
       - redisnet
 
+  traefik:
+    image: "traefik:v3.2"
+    container_name: "traefik"
+    command:
+      - "--api.insecure=true"
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--entryPoints.websecure.address=:443"
+      - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
+      - "--certificatesresolvers.myresolver.acme.email=admin-dc@pnt.opole.pl"
+      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+    ports:
+      - "443:443"  # SSL port
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - "./letsencrypt:/letsencrypt"  # Persistent storage for certificates
+    networks:
+      - traefiknet
+
   db:
     image: mariadb:10.5.9
     container_name: mariadb
@@ -67,3 +91,4 @@ volumes:
 networks:
   dbnet:
   redisnet:
+  traefiknet: