BAHAMAS

docker-compose.yml

@@ -1,13 +1,45 @@
 version: '3.4'
 
 services:
+  traefik:
+    image: traefik:v2.10.4
+    container_name: traefik
+    networks:
+      - catalog
+    command:
+      - "--providers.docker=true"
+      - "--providers.docker.exposedbydefault=false"
+      - "--entrypoints.web.address=:80"
+      - "--log.level=DEBUG"
+    ports:
+      - "8080:80"       
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+  whoami: # TEST PURPOSE
+        image: traefik/whoami
+        container_name: whoami
+        networks:
+        - catalog
+        ports:
+        - "5000:80"
+        labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.obg.entrypoints=web"
+        - "traefik.http.routers.obg.rule=Host(`localhost`)"
+        - "traefik.http.routers.obg.tls=false"
+        - "traefik.http.services.obg.loadbalancer.server.port=80"
+        - "traefik.http.routers.obg.middlewares=oc-auth"
   oc-auth:
     image: 'oc-auth:latest'
     ports:
       - 8094:8080
     container_name: oc-auth
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.middlewares.auth.forwardauth.address=http://oc-auth:8080/oc/forward"
+      - "traefik.http.middlewares.auth.forwardauth.authResponseHeaders=X-Forwarded-User"
+      - "traefik.http.services.auth.loadbalancer.server.port=8080"
     environment:
-          PVK_PATH: /etc/oc/pvk.pem
           LDAP_ENDPOINTS: ldap:389
           LDAP_BINDDN: cn=admin,dc=example,dc=com
           LDAP_BINDPW: password
@@ -15,6 +47,8 @@ services:
           LDAP_ROLE_BASEDN: "ou=AppRoles,dc=example,dc=com"
     networks: 
       - catalog
+    volumes:
+      - ./pem:/etc/oc/pem
 networks: 
   catalog:
     external: true