windyboy
daf4aa3dfa
- Created Methodology.md to outline the P.A.R.A. system and its components. - Added Outline.md for a structured overview of P.A.R.A. content. - Documented PKM content organization decisions in PKM-Consolidation-Decision.md. - Introduced Workflows.md to explain practical applications of P.A.R.A. in work scenarios. - Moved sensitive information to security-sensitive folder and restructured the Personal folder to align with P.A.R.A. principles. - Archived backup files including Matrix Me.md and TTG Cookies.md. - Implemented a comprehensive refactor of the Personal folder to improve organization and security.
67 lines
1.8 KiB
Markdown
Executable File
67 lines
1.8 KiB
Markdown
Executable File
|
|
|
|
|
|
```
|
|
services:
|
|
traefik:
|
|
image: traefik:v3.4
|
|
container_name: traefik
|
|
restart: unless-stopped
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
networks:
|
|
- proxy
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "8080:8080"
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- ./certs:/certs
|
|
- ./dynamic:/dynamic
|
|
|
|
command:
|
|
# Entrypoints
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--entrypoints.websecure.http.tls=true"
|
|
|
|
# Providers
|
|
- "--providers.file.filename=/dynamic/tls.yaml"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--providers.docker.network=proxy"
|
|
|
|
# API & Dashboard
|
|
- "--api.dashboard=true"
|
|
- "--api.insecure=false"
|
|
|
|
# Logs
|
|
- "--log.level=INFO"
|
|
- "--accesslog=true"
|
|
- "--metrics.prometheus=true"
|
|
|
|
# Let's Encrypt (ACME)
|
|
- "--certificatesresolvers.letsencrypt.acme.email=zhiqiang@windy.me"
|
|
- "--certificatesresolvers.letsencrypt.acme.storage=/certs/acme.json"
|
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
|
|
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.dashboard.rule=Host(`us4.wsvc.info`)
|
|
- traefik.http.routers.dashboard.entrypoints=websecure,web
|
|
- traefik.http.routers.dashboard.service=api@internal
|
|
- traefik.http.routers.dashboard.tls.certresolver=letsencrypt
|
|
- "traefik.http.middlewares.dashboard-auth.basicauth.users=admin:$$apr1$$aBNLDToX$$nIKWMN41tGMBhtdSaA/Ih/"
|
|
- traefik.http.routers.dashboard.middlewares=dashboard-auth@docker,redirect-to-https@file
|
|
|
|
networks:
|
|
proxy:
|
|
name: proxy
|
|
external: true
|
|
|
|
```
|
|
|
|
```
|
|
S3cureP@ssw0rd!
|
|
``` |