-
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathdocker-compose.yml
120 lines (118 loc) · 5.57 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
services:
gitgram_teknum:
image: ghcr.io/teknologi-umum/gitgram:edge
environment:
NODE_ENV: production
PORT: 3000
WEBHOOK_SECRET: ${TEKNUM_WEBHOOK_SECRET}
BOT_TOKEN: ${TEKNUM_BOT_TOKEN}
HOME_GROUP: ${TEKNUM_HOME_GROUP}
IGNORE_PRIVATE_REPOSITORY: true
labels:
- "traefik.enable=true"
- "traefik.docker.network=public-web"
- "traefik.http.routers.gitgram_teknum.entrypoints=web,websecure"
- "traefik.http.routers.gitgram_teknum.rule=Host(`teknum.gitgram.teknologiumum.com`)"
- "traefik.http.routers.gitgram_teknum.priority=1"
- "traefik.http.routers.gitgram_teknum.tls.certresolver=tlsresolver"
- "traefik.http.routers.gitgram_teknum.middlewares=gitgram_teknum-header,gitgram_teknum-rate,gitgram_teknum-redirectscheme"
- "traefik.http.services.gitgram_teknum.loadbalancer.server.port=3000"
- "traefik.http.services.gitgram_teknum.loadbalancer.server.scheme=http"
- "traefik.http.services.gitgram_teknum.loadbalancer.healthcheck.interval=30s"
- "traefik.http.services.gitgram_teknum.loadbalancer.healthcheck.path=/"
- "traefik.http.middlewares.gitgram_teknum-rate.ratelimit.average=200"
- "traefik.http.middlewares.gitgram_teknum-rate.ratelimit.burst=100"
- "traefik.http.middlewares.gitgram_teknum-rate.ratelimit.period=1s"
- "traefik.http.middlewares.gitgram_teknum-header.headers.addvaryheader=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.frameDeny=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.browserxssfilter=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.stsSeconds=604800"
- "traefik.http.middlewares.gitgram_teknum-header.headers.stsIncludeSubdomains=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.browserXssFilter=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.contentTypeNosniff=true"
- "traefik.http.middlewares.gitgram_teknum-header.headers.customResponseHeaders.server=Teknologi Umum"
- "traefik.http.middlewares.gitgram_teknum-redirectscheme.redirectscheme.scheme=https"
- "traefik.http.middlewares.gitgram_teknum-redirectscheme.redirectscheme.permanent=true"
- "com.centurylinklabs.watchtower.enable=true"
platform: linux/amd64
healthcheck:
test: curl -f http://localhost:3000/ || exit 1
interval: 15s
timeout: 10s
retries: 5
deploy:
mode: replicated
replicas: 1
restart_policy:
condition: unless-stopped
delay: 30s
window: 120s
resources:
limits:
memory: 300MB
cpus: '0.75'
reservations:
memory: 100MB
cpus: '0.10'
networks:
- public-web
gitgram_tokobapak:
image: ghcr.io/teknologi-umum/gitgram:edge
environment:
NODE_ENV: production
PORT: 3000
WEBHOOK_SECRET: ${TOKOBAPAK_WEBHOOK_SECRET}
BOT_TOKEN: ${TOKOBAPAK_BOT_TOKEN}
HOME_GROUP: ${TOKOBAPAK_HOME_GROUP}
IGNORE_PRIVATE_REPOSITORY: true
labels:
- "traefik.enable=true"
- "traefik.docker.network=public-web"
- "traefik.http.routers.gitgram_tokobapak.entrypoints=web,websecure"
- "traefik.http.routers.gitgram_tokobapak.rule=Host(`tokobapak.gitgram.teknologiumum.com`)"
- "traefik.http.routers.gitgram_tokobapak.priority=1"
- "traefik.http.routers.gitgram_tokobapak.tls.certresolver=tlsresolver"
- "traefik.http.routers.gitgram_tokobapak.middlewares=gitgram_tokobapak-header,gitgram_tokobapak-rate,gitgram_tokobapak-redirectscheme"
- "traefik.http.services.gitgram_tokobapak.loadbalancer.server.port=3000"
- "traefik.http.services.gitgram_tokobapak.loadbalancer.server.scheme=http"
- "traefik.http.services.gitgram_tokobapak.loadbalancer.healthcheck.interval=30s"
- "traefik.http.services.gitgram_tokobapak.loadbalancer.healthcheck.path=/"
- "traefik.http.middlewares.gitgram_tokobapak-rate.ratelimit.average=200"
- "traefik.http.middlewares.gitgram_tokobapak-rate.ratelimit.burst=100"
- "traefik.http.middlewares.gitgram_tokobapak-rate.ratelimit.period=1s"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.addvaryheader=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.frameDeny=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.browserxssfilter=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.stsSeconds=604800"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.stsIncludeSubdomains=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.browserXssFilter=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.contentTypeNosniff=true"
- "traefik.http.middlewares.gitgram_tokobapak-header.headers.customResponseHeaders.server=Teknologi Umum"
- "traefik.http.middlewares.gitgram_tokobapak-redirectscheme.redirectscheme.scheme=https"
- "traefik.http.middlewares.gitgram_tokobapak-redirectscheme.redirectscheme.permanent=true"
- "com.centurylinklabs.watchtower.enable=true"
platform: linux/amd64
healthcheck:
test: curl -f http://localhost:3000/ || exit 1
interval: 15s
timeout: 10s
retries: 5
deploy:
mode: replicated
replicas: 1
restart_policy:
condition: unless-stopped
delay: 30s
window: 120s
resources:
limits:
memory: 300MB
cpus: '0.75'
reservations:
memory: 100MB
cpus: '0.10'
networks:
- public-web
networks:
public-web:
external: true