55 lines
2.2 KiB
YAML
55 lines
2.2 KiB
YAML
|
|
version: '3.8'
|
|
|
|
services:
|
|
global-it24-web:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
args:
|
|
NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-https://global-it24.local}
|
|
container_name: global-it24-landing
|
|
restart: unless-stopped
|
|
environment:
|
|
- NODE_ENV=production
|
|
- NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-https://global-it24.local}
|
|
networks:
|
|
- traefik-public
|
|
labels:
|
|
# Включаем Traefik для этого контейнера
|
|
- "traefik.enable=true"
|
|
|
|
# Настройка HTTP
|
|
- "traefik.http.routers.global-it24.rule=Host(`${DOMAIN:-global-it24.local}`)"
|
|
- "traefik.http.routers.global-it24.entrypoints=web"
|
|
- "traefik.http.routers.global-it24.middlewares=redirect-to-https@docker"
|
|
|
|
# Настройка HTTPS
|
|
- "traefik.http.routers.global-it24-secure.rule=Host(`${DOMAIN:-global-it24.local}`)"
|
|
- "traefik.http.routers.global-it24-secure.entrypoints=websecure"
|
|
- "traefik.http.routers.global-it24-secure.tls=true"
|
|
- "traefik.http.routers.global-it24-secure.tls.certresolver=letsencrypt"
|
|
|
|
# Middleware для редиректа HTTP -> HTTPS
|
|
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
|
|
- "traefik.http.middlewares.redirect-to-https.redirectscheme.permanent=true"
|
|
|
|
# Указываем порт сервиса
|
|
- "traefik.http.services.global-it24.loadbalancer.server.port=3000"
|
|
|
|
# Middleware для заголовков безопасности
|
|
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-Frame-Options=SAMEORIGIN"
|
|
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-Content-Type-Options=nosniff"
|
|
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-XSS-Protection=1; mode=block"
|
|
- "traefik.http.routers.global-it24-secure.middlewares=security-headers@docker"
|
|
healthcheck:
|
|
test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 40s
|
|
|
|
networks:
|
|
traefik-public:
|
|
external: true
|