|
|
|
@ -0,0 +1,62 @@ |
|
|
|
--- |
|
|
|
- name: Deploy web-proxy with Docker and Traefik |
|
|
|
hosts: all |
|
|
|
become: yes |
|
|
|
tasks: |
|
|
|
- name: Create directory for web-proxy |
|
|
|
file: |
|
|
|
path: /mnt/docker/web-proxy/ |
|
|
|
state: directory |
|
|
|
mode: '0755' |
|
|
|
|
|
|
|
- name: Create docker-compose file |
|
|
|
copy: |
|
|
|
dest: /mnt/docker/web-proxy/docker-compose.yaml |
|
|
|
content: | |
|
|
|
version: "3" |
|
|
|
services: |
|
|
|
https-proxy: |
|
|
|
image: traefik:v2.9 |
|
|
|
container_name: https-proxy |
|
|
|
hostname: https-proxy |
|
|
|
restart: unless-stopped |
|
|
|
healthcheck: |
|
|
|
test: grep -qr "traefik" /proc/*/status || exit 1 |
|
|
|
interval: 1m |
|
|
|
timeout: 30s |
|
|
|
retries: 3 |
|
|
|
ports: |
|
|
|
- 9080:80 |
|
|
|
- 9443:443 |
|
|
|
command: |
|
|
|
- "--api=true" |
|
|
|
- "--api.dashboard=false" |
|
|
|
- "--api.insecure=false" |
|
|
|
- "--pilot.dashboard=false" |
|
|
|
- "--global.sendAnonymousUsage=false" |
|
|
|
- "--global.checkNewVersion=false" |
|
|
|
- "--accesslog=true" |
|
|
|
- "--providers.docker=true" |
|
|
|
- "--providers.docker.exposedbydefault=false" |
|
|
|
- "--entrypoints.http.address=:80" |
|
|
|
- "--entrypoints.http.http.redirections.entrypoint.to=https" |
|
|
|
- "--entrypoints.http.http.redirections.entrypoint.scheme=https" |
|
|
|
- "--entrypoints.https=true" |
|
|
|
- "--entrypoints.https.address=:443" |
|
|
|
- "--certificatesResolvers.letsencrypt.acme.email=it-admin@asmodee.de" |
|
|
|
- "--certificatesResolvers.letsencrypt.acme.storage=/etc/traefik/acme.json" |
|
|
|
- "--certificatesResolvers.letsencrypt.acme.httpChallenge.entryPoint=http" |
|
|
|
volumes: |
|
|
|
- ./traefik:/etc/traefik |
|
|
|
- /etc/timezone:/etc/timezone:ro |
|
|
|
- /etc/localtime:/etc/localtime:ro |
|
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro |
|
|
|
networks: |
|
|
|
default: |
|
|
|
name: build |
|
|
|
external: true |
|
|
|
|
|
|
|
- name: Run docker-compose |
|
|
|
ansible.builtin.command: |
|
|
|
chdir: /mnt/docker/web-proxy/ |
|
|
|
cmd: docker-compose up -d |