domverse
a5971403b2
All checks were successful
Deploy / deploy (push) Successful in 20s
Traefik docker provider skips routing for containers whose Docker HEALTHCHECK reports unhealthy. Our /healthz returns 503 if LAPI is unreachable, which left the container stuck unhealthy and the router never appeared — every request returned 404 from Traefik. /healthz still exists for manual probes; Kuma probes via Traefik also still work. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
36 lines
1.2 KiB
YAML
36 lines
1.2 KiB
YAML
services:
|
|
crowdsec-admin:
|
|
build:
|
|
context: ./app
|
|
image: crowdsec-admin:local
|
|
container_name: crowdsec-admin
|
|
restart: unless-stopped
|
|
networks:
|
|
- domverse
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
environment:
|
|
- TZ=Europe/Berlin
|
|
- LAPI_URL=http://host.docker.internal:8080
|
|
- LAPI_MACHINE_ID=${LAPI_MACHINE_ID}
|
|
- LAPI_MACHINE_PASSWORD=${LAPI_MACHINE_PASSWORD}
|
|
- TRUSTED_PROXY_HOPS=1
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.crowdsec-admin.rule=Host(`crowdsec.domverse-berlin.eu`)"
|
|
- "traefik.http.routers.crowdsec-admin.entrypoints=https"
|
|
- "traefik.http.routers.crowdsec-admin.tls.certresolver=http"
|
|
- "traefik.http.routers.crowdsec-admin.middlewares=authentik@docker"
|
|
- "traefik.http.services.crowdsec-admin.loadbalancer.server.port=8000"
|
|
|
|
- "kuma.crowdsec-admin.http.name=CrowdSec Admin"
|
|
- "kuma.crowdsec-admin.http.url=https://crowdsec.domverse-berlin.eu"
|
|
- "kuma.crowdsec-admin.http.interval=120"
|
|
- "kuma.crowdsec-admin.http.max_retries=2"
|
|
- "kuma.crowdsec-admin.http.retry_interval=60"
|
|
- "kuma.crowdsec-admin.http.accepted_statuscodes=[\"200-399\"]"
|
|
|
|
networks:
|
|
domverse:
|
|
external: true
|