44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
version: '3.4'
|
|
|
|
services:
|
|
traefik:
|
|
image: traefik:v2.10.4
|
|
container_name: traefik
|
|
restart: unless-stopped
|
|
networks:
|
|
- catalog
|
|
command:
|
|
- "--api.insecure=true"
|
|
- "--providers.docker=true"
|
|
- "--entrypoints.web.address=:8000"
|
|
ports:
|
|
- "8000:8000" # Expose Traefik on port 8000
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
oc-auth:
|
|
image: 'oc-auth:latest'
|
|
ports:
|
|
- 8094:8080
|
|
container_name: oc-auth
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.auth.entrypoints=web"
|
|
- "traefik.http.routers.auth.rule=PathPrefix(`/auth`)"
|
|
- "traefik.http.middlewares.auth-rewrite.replacepathregex.regex=^/auth(.*)"
|
|
- "traefik.http.middlewares.auth-rewrite.replacepathregex.replacement=/oc$$1"
|
|
- "traefik.http.routers.auth.middlewares=auth-rewrite"
|
|
- "traefik.http.services.auth.loadbalancer.server.port=8080"
|
|
- "traefik.http.middlewares.auth.forwardauth.address=http://oc-auth:8080/oc/forward"
|
|
environment:
|
|
LDAP_ENDPOINTS: ldap:389
|
|
LDAP_BINDDN: cn=admin,dc=example,dc=com
|
|
LDAP_BINDPW: password
|
|
LDAP_BASEDN: "dc=example,dc=com"
|
|
LDAP_ROLE_BASEDN: "ou=AppRoles,dc=example,dc=com"
|
|
networks:
|
|
- catalog
|
|
volumes:
|
|
- ./pem:/etc/oc/pem
|
|
networks:
|
|
catalog:
|
|
external: true |