This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [GuillaumeFalourd/branch-exists](https://github.com/GuillaumeFalourd/branch-exists) | action | pinDigest | → `0092904` | | [actions/cache](https://github.com/actions/cache) | action | pinDigest | → `6682284` | | [actions/checkout](https://github.com/actions/checkout) | action | pinDigest | → `de0fac2` | | [actions/setup-node](https://github.com/actions/setup-node) | action | pinDigest | → `53b8394` | | [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | pinDigest | → `ae59a72` | | [azure/setup-helm](https://github.com/azure/setup-helm) | action | pinDigest | → `1a275c3` | | docker.io/postgres | | pinDigest | → `44d837e` | | dxflrs/garage | | pinDigest | → `45a61ce` | | [favonia/cloudflare-ddns](https://github.com/favonia/cloudflare-ddns) | | pinDigest | → `a4e2089` | | [ghcr.io/0xerr0r/blocky](https://github.com/0xERR0R/blocky) | | pinDigest | → `a6d99f3` | | ghcr.io/ai-dock/stable-diffusion-webui | | pinDigest | → `bc4b2b1` | | [ghcr.io/dmunozv04/isponsorblocktv](https://github.com/dmunozv04/iSponsorBlockTV) | | pinDigest | → `5458565` | | ghcr.io/gabe565/castsponsorskip | | pinDigest | → `f556d27` | | [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) | | pinDigest | → `b129cb0` | | ghcr.io/moghtech/komodo-periphery | | pinDigest | → `bd79cf9` | | [ghcr.io/renovatebot/renovate](https://renovatebot.com) ([source](https://github.com/renovatebot/renovate)) | container | pinDigest | → `9228574` | | [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) | | pinDigest | → `95e5287` | | ghcr.io/tailscale/tailscale | | pinDigest | → `95e5287` | | [ghcr.io/tecnativa/docker-socket-proxy](https://github.com/Tecnativa/docker-socket-proxy) | | pinDigest | → `1f3a6f3` | | [ghcr.io/traefik/traefik](https://hub.docker.com/_/traefik) ([source](https://github.com/traefik/traefik-library-image)) | | pinDigest | → `acfc806` | | [gitea/gitea](https://github.com/go-gitea/gitea) | | pinDigest | → `f846d26` | | khairul169/garage-webui | | pinDigest | → `17c7935` | | ollama/ollama | | pinDigest | → `5a5d014` | | quay.io/prometheus/node-exporter | | pinDigest | → `337ff1d` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #4968 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
73 lines
3.3 KiB
YAML
73 lines
3.3 KiB
YAML
---
|
|
services:
|
|
traefik:
|
|
image: ghcr.io/traefik/traefik:v3.6.11@sha256:acfc80650104f0194a15f73dc1648f517561bc1645391a15705332a064cfc33c
|
|
container_name: traefik
|
|
command:
|
|
- "--global.checkNewVersion=false"
|
|
- "--global.sendAnonymousUsage=false"
|
|
- "--api.insecure=false"
|
|
- "--api.dashboard=true"
|
|
- "--log.level=INFO"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--entryPoints.web.address=:80"
|
|
- "--entrypoints.web.http.redirections.entryPoint.to=web-secure"
|
|
- "--entrypoints.web.http.redirections.entryPoint.scheme=https"
|
|
- "--entryPoints.web-secure.address=:443"
|
|
- "--entryPoints.web-secure.http.tls.options=default"
|
|
- "--entryPoints.web-secure.http.tls.certResolver=cloudflare"
|
|
- "--entryPoints.web-secure.http.tls.domains[0].main=*.alexlebens.net"
|
|
- "--entryPoints.web-secure.http.tls.domains[0].sans[0]=alexlebens.net"
|
|
- "--certificatesresolvers.cloudflare.acme.dnschallenge=true"
|
|
- "--certificatesresolvers.cloudflare.acme.dnschallenge.provider=cloudflare"
|
|
- "--certificatesresolvers.cloudflare.acme.dnschallenge.delaybeforecheck=10"
|
|
- "--certificatesresolvers.cloudflare.acme.dnschallenge.resolvers=1.1.1.1:53"
|
|
- "--certificatesresolvers.cloudflare.acme.email=alexanderlebens@gmail.com"
|
|
- "--certificatesresolvers.cloudflare.acme.storage=acme.json"
|
|
- "--metrics.prometheus=true"
|
|
- "--metrics.prometheus.buckets=0.1,0.3,1.2,5.0"
|
|
- "--metrics.prometheus.addEntryPointsLabels=true"
|
|
- "--metrics.prometheus.addRoutersLabels=true"
|
|
- "--metrics.prometheus.addServicesLabels=true"
|
|
- "--metrics.prometheus.entryPoint=web-secure"
|
|
- "--metrics.prometheus.manualRouting=true"
|
|
env_file:
|
|
- .env
|
|
environment:
|
|
- PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
labels:
|
|
traefik.enable: true
|
|
traefik.docker.network: internal
|
|
traefik.http.routers.dashboard.entrypoints: web-secure
|
|
traefik.http.routers.dashboard.rule: (Host(`traefik-ps09rp.alexlebens.net`) && (PathPrefix(`/api/`) || PathPrefix(`/dashboard/`)))
|
|
traefik.http.routers.dashboard.service: api@internal
|
|
traefik.http.routers.dashboard.tls: true
|
|
traefik.http.routers.dashboard.tls.certresolver: cloudflare
|
|
traefik.http.routers.metrics.entrypoints: web-secure
|
|
traefik.http.routers.metrics.rule: (Host(`traefik-ps09rp.alexlebens.net`) && Path(`/metrics`))
|
|
traefik.http.routers.metrics.service: prometheus@internal
|
|
traefik.http.routers.metrics.tls: true
|
|
traefik.http.routers.metrics.tls.certresolver: cloudflare
|
|
networks:
|
|
internal: null
|
|
ports:
|
|
- 0.0.0.0:80:80
|
|
- 0.0.0.0:443:443
|
|
privileged: true
|
|
restart: always
|
|
volumes:
|
|
- letsencrypt:/letsencrypt
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
|
|
networks:
|
|
internal:
|
|
name: internal
|
|
driver: bridge
|
|
ipam:
|
|
config:
|
|
- subnet: 172.18.0.0/16
|
|
|
|
volumes:
|
|
letsencrypt:
|