58 lines
2.4 KiB
YAML
58 lines
2.4 KiB
YAML
services:
|
|
vaults3:
|
|
image: eniz1806/vaults3:4.4.77
|
|
container_name: vaults3
|
|
network_mode: bridge
|
|
labels:
|
|
- traefik.http.routers.vaults3.rule=Host(`s3.arnoutvw.nl`)
|
|
- traefik.http.routers.vaults3-name.rule=Host(`vaults3.arnoutvw.nl`)
|
|
- traefik.http.services.vaults3-name.loadbalancer.server.port=9000
|
|
- pangolin.proxy-resources.vaults3.name=vaults3
|
|
- pangolin.proxy-resources.vaults3.full-domain=s3.arnoutvw.nl
|
|
- pangolin.proxy-resources.vaults3.protocol=http
|
|
- pangolin.proxy-resources.vaults3.ssl=true
|
|
- pangolin.proxy-resources.vaults3.targets[0].method=http
|
|
- pangolin.proxy-resources.vaults3.targets[0].hostname=192.168.10.144
|
|
- pangolin.proxy-resources.vaults3.targets[0].port=9010
|
|
- pangolin.proxy-resources.vaults3.targets[0].healthcheck.hostname=192.168.10.144
|
|
- pangolin.proxy-resources.vaults3.targets[0].healthcheck.port=9010
|
|
- pangolin.proxy-resources.vaults3.targets[0].healthcheck.enabled=true
|
|
- pangolin.proxy-resources.vaults3.auth.sso-enabled=false
|
|
- pangolin.proxy-resources.vaults3.rules[0].match=region
|
|
- pangolin.proxy-resources.vaults3.rules[0].action=allow
|
|
- pangolin.proxy-resources.vaults3.rules[0].value=EU
|
|
- pangolin.proxy-resources.vaults3.rules[1].match=ip
|
|
- pangolin.proxy-resources.vaults3.rules[1].action=allow
|
|
- pangolin.proxy-resources.vaults3.rules[1].value=172.21.0.1
|
|
- pangolin.proxy-resources.vaults3.rules[2].match=country
|
|
- pangolin.proxy-resources.vaults3.rules[2].action=deny
|
|
- pangolin.proxy-resources.vaults3.rules[2].value=ALL
|
|
ports:
|
|
- "9010:9000/tcp"
|
|
environment:
|
|
VAULTS3_ACCESS_KEY: ${VAULTS3_ACCESS_KEY}
|
|
VAULTS3_SECRET_KEY: ${VAULTS3_SECRET_KEY}
|
|
VAULTS3_ENCRYPTION_KEY: ${VAULTS3_ENCRYPTION_KEY}
|
|
VAULTS3_PORT: 9000
|
|
VAULTS3_ADDRESS: 0.0.0.0
|
|
VAULTS3_DATA_DIR: /data
|
|
VAULTS3_METADATA_DIR: /metadata
|
|
VAULTS3_LOG_LEVEL: info
|
|
VAULTS3_DOMAIN: s3.arnoutvw.nl
|
|
volumes:
|
|
- /mnt/user/appdata/vaults3/data:/data
|
|
- /mnt/user/appdata/vaults3/metadata:/metadata
|
|
- /mnt/user/appdata/vaults3/config:/etc/vaults3
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: [ "CMD", "wget", "-qO-", "http://localhost:9000/health" ]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: 50m
|
|
max-file: "1"
|