haf_api_node/caddy.yaml at master · openhive-network/haf_api_node · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
services:
  caddy:
    image: ${HIVE_API_NODE_REGISTRY:-registry.hive.blog}/haf_api_node/caddy:${HAF_API_NODE_VERSION:-${HIVE_API_NODE_VERSION}}
    profiles:
      - admin
      - servers
    ports:
      - 80:80
      - 443:443
      - 443:443/udp
    environment:
      PUBLIC_HOSTNAME: ${PUBLIC_HOSTNAME}
      CADDY_SITES: ${CADDY_SITES:-${PUBLIC_HOSTNAME}}
      JSONRPC_API_SERVER_NAME: ${JSONRPC_API_SERVER_NAME:-drone}
      ADMIN_ENDPOINT_PROTOCOL: ${ADMIN_ENDPOINT_PROTOCOL:-https}
    volumes:
      - type: bind
        source: ./caddy/Caddyfile
        target: /etc/caddy/Caddyfile
        read_only: true
      - type: bind
        source: ./caddy/snippets
        target: /etc/caddy/snippets
        read_only: true
      - type: bind
        source: ./caddy/admin_html
        target: /etc/caddy/admin_html
        read_only: true
      - type: bind
        source: ${HAF_DATA_DIRECTORY:-${TOP_LEVEL_DATASET_MOUNTPOINT}}/logs/pgbadger
        target: /etc/caddy/pgbadger
        read_only: true
      - type: bind
        source: ${HAF_DATA_DIRECTORY:-${TOP_LEVEL_DATASET_MOUNTPOINT}}/logs/caddy
        target: /var/log/caddy
        read_only: false
      - type: bind
        source: ${TLS_SELF_SIGNED_SNIPPET}
        target: /etc/caddy/tls-self-signed-snippets/self-signed.snippet
        read_only: true
      - type: bind
        source: ${LOCAL_ADMIN_ONLY_SNIPPET}
        target: /etc/caddy/local-admin-only-snippets/local-admin-only.snippet
        read_only: true
      - type: volume
        source: caddy_data
        target: /data
      - type: volume
        source: caddy_config
        target: /config
    healthcheck:
      test: ["CMD-SHELL", "wget -T2 -nv -t1 --spider http://127.0.0.1:2019/reverse_proxy/upstreams || exit 1"]
      interval: 10s
      timeout: 3s
      retries: 10
      start_period: 1m
    networks:
      - haf-network
  version-display:
    image: ${HIVE_API_NODE_REGISTRY:-registry.hive.blog}/haf_api_node/version-display:${HAF_API_NODE_VERSION:-${HIVE_API_NODE_VERSION}}
    profiles:
      - admin
      - servers
    environment:
      PROJECT: ${COMPOSE_PROJECT_NAME}
    volumes:
      - type: bind
        source: /var/run/docker.sock
        target: /var/run/docker.sock
    networks:
      - haf-network

volumes:
  # this volume stores your SSL certificates, every time you destroy this volume,
  # caddy will obtain a new certificate at startup, and this can quickly cause
  # you to hit letsencrypt rate limts.
  caddy_data:
  caddy_config: