Initial commit: docker compose config

.gitignore

@@ -0,0 +1,17 @@
+# Secrets
+.env
+*.pem
+*.key
+
+# Docker volumes / data
+data/
+*-data/
+vw-data/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Backups
+*.tar.gz
+*.bak

docker-compose.yml

@@ -0,0 +1,38 @@
+services:
+    traefik:
+        image: "traefik"
+        container_name: traefik
+        restart: always
+        command:
+            - "--api=true"
+            - "--api.insecure=true"
+            - "--providers.docker=true"
+            - "--providers.docker.exposedbydefault=false"
+            - "--entrypoints.web.address=:80"
+            - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
+            - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
+            - "--entrypoints.websecure.address=:443"
+            - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
+            - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
+            - "--certificatesresolvers.myresolver.acme.email=${SSL_EMAIL}"
+            - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+            - "--providers.file.directory=/config"
+            - "--providers.file.watch=true"
+        ports:
+            - "80:80"
+            - "443:443"
+        volumes:
+            - traefik_data:/letsencrypt
+            - /var/run/docker.sock:/var/run/docker.sock:ro
+            - /mnt/synology_drive:/mnt/synology_drive:rw
+            - ./traefik-config:/config:ro
+        networks:
+            - proxy
+
+networks:
+    proxy:
+        name: traefik_proxy
+        external: true
+
+volumes:
+    traefik_data:

traefik-config/nas.yml

@@ -0,0 +1,20 @@
+http:
+  routers:
+    nas:
+      rule: "Host(`nas.kzbrd.ru`)"
+      entryPoints:
+        - websecure
+      service: nas-svc
+      tls:
+        certResolver: myresolver
+
+  services:
+    nas-svc:
+      loadBalancer:
+        servers:
+          - url: "https://192.168.1.108:5001"
+        serversTransport: insecureTransport
+
+  serversTransports:
+    insecureTransport:
+      insecureSkipVerify: true