Initial commit: docker compose config

.gitignore

@@ -0,0 +1,17 @@
+# Secrets
+.env
+*.pem
+*.key
+
+# Docker volumes / data
+data/
+*-data/
+vw-data/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Backups
+*.tar.gz
+*.bak

docker-compose.yaml

@@ -0,0 +1,42 @@
+services:
+    n8n:
+        image: docker.n8n.io/n8nio/n8n
+        container_name: n8n
+        restart: always
+        ports:
+            - "127.0.0.1:5678:5678"
+        labels:
+            - traefik.enable=true
+            - traefik.http.routers.n8n.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
+            - traefik.http.routers.n8n.tls=true
+            - traefik.http.routers.n8n.entrypoints=web,websecure
+            - traefik.http.routers.n8n.tls.certresolver=myresolver
+            - traefik.http.middlewares.n8n.headers.SSLRedirect=true
+            - traefik.http.middlewares.n8n.headers.STSSeconds=315360000
+            - traefik.http.middlewares.n8n.headers.browserXSSFilter=true
+            - traefik.http.middlewares.n8n.headers.contentTypeNosniff=true
+            - traefik.http.middlewares.n8n.headers.forceSTSHeader=true
+            - traefik.http.middlewares.n8n.headers.SSLHost=${DOMAIN_NAME}
+            - traefik.http.middlewares.n8n.headers.STSIncludeSubdomains=true
+            - traefik.http.middlewares.n8n.headers.STSPreload=true
+            - traefik.http.routers.n8n.middlewares=n8n@docker
+        environment:
+            - N8N_HOST=${SUBDOMAIN}.${DOMAIN_NAME}
+            - N8N_PORT=5678
+            - N8N_PROTOCOL=https
+            - NODE_ENV=production
+            - WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/
+            - GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
+        volumes:
+            - n8n_data:/home/node/.n8n
+            - ./local-files:/files
+        networks:
+            - proxy
+
+networks:
+    proxy:
+        external: true
+        name: traefik_proxy
+
+volumes:
+    n8n_data:

traefik-config/nas.yml

@@ -0,0 +1,20 @@
+http:
+  routers:
+    nas:
+      rule: "Host(`nas.kzbrd.ru`)"
+      entryPoints:
+        - websecure
+      service: nas-svc
+      tls:
+        certResolver: myresolver
+
+  services:
+    nas-svc:
+      loadBalancer:
+        servers:
+          - url: "https://192.168.1.108:5001"
+        serversTransport: insecureTransport
+
+  serversTransports:
+    insecureTransport:
+      insecureSkipVerify: true