docker-compose.traefik.yml

# Allows traefik to work as the edge router for multiple projects.
#
# By default the rules will redirect to ${SERVICE}.${COMPOSE_PROJECT_NAME}.traefik.me
# if working on localhost and ${SERVICE}-${COMPOSE_PROJECT_NAME}-XX-XX-XX-XX.traefik.me
# if working remotely, where XX-XX-XX-XX is the dashed version of your IP address.
#
# For a traefik to be able to route traffic to a given container, that
# container needs to be on the `gateway` network, otherwise traefik will
# discover it via Docker but will not be able to redirect traffic to it.
version: "3.7"
networks:
  default:
  gateway:
    name: gateway
    driver: bridge
    internal: false
services:
  traefik:
    image: traefik:2.2.1
    container_name: traefik
    # Do not set `api.insecure`, `api.dashboard`, `api.debug` to `true` in production.
    # Also do not expose database 3306/5432, as an entry point.
    command: >
      --api.insecure=true
      --api.dashboard=true
      --api.debug=true
      --entryPoints.http.address=:80
      --entryPoints.https.address=:443
      --entryPoints.mysql.address=:3306
      --entryPoints.postgresql.address=:5432
      --providers.docker
      --providers.docker.network=gateway
      --providers.docker.exposedByDefault=false
      --providers.file.filename=/etc/traefik/tls.yml
      '--providers.docker.defaultRule=Host(`{{ index .Labels "com.docker.compose.service" }}-{{ index .Labels "com.docker.compose.project" }}.${DRUPAL_SITE_HOST:-traefik.me}`,`{{ index .Labels "com.docker.compose.service" }}-{{ index .Labels "com.docker.compose.project" }}-${DRUPAL_SITE_HOST:-traefik.me}`)'
    ports:
      # Has to be bind mounted to 80/443 for assumptions
      # around internal network alias to work as intended.
      - 80:80
      - 443:443
      # Allows direct connection to the database for using
      # drush on the host machine. Do not do in production.
      - 3306:3306
      - 5432:5432
      # The Web UI (enabled by --api.insecure=true)
      - ${TRAEFIK_WEB_UI_PORT-8080}:8080
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./tls.yml:/etc/traefik/tls.yml
      - ./certs:/etc/ssl/traefik
    labels:
      # Do not expose in production.
      - traefik.http.routers.api.service=api@internal
    networks:
      default:
        aliases:
          - islandora-${COMPOSE_PROJECT_NAME-isle-dc}.${DRUPAL_SITE_HOST-traefik.me}
          - islandora-${COMPOSE_PROJECT_NAME-isle-dc}-${DRUPAL_SITE_HOST-traefik.me}