refactor(unifi): replace hardcoded domain in commented rule with ALT_DOMAIN variable
ci/woodpecker/push/woodpecker Pipeline was canceled

This commit is contained in:
2026-06-25 22:57:13 -07:00
parent a2f480bdaf
commit e376ea74a5
+94 -94
View File
@@ -1,97 +1,97 @@
services: services:
Unifi-Controller: Unifi-Controller:
env_file: env_file:
- unifi.env - unifi.env
environment: environment:
- PUID=${PUID} - PUID=${PUID}
- PGID=${PGID} - PGID=${PGID}
- TZ=PST - TZ=PST
- RUNAS_UID0=false - RUNAS_UID0=false
- LOTSOFDEVICES=true - LOTSOFDEVICES=true
# - MEM_LIMIT=1024 #optional # - MEM_LIMIT=1024 #optional
# - MEM_STARTUP=1024 #optional # - MEM_STARTUP=1024 #optional
hostname: unifi hostname: unifi
image: jacobalberty/unifi:latest image: jacobalberty/unifi:latest
# restart: always # restart: always
networks: networks:
- traefik_backend - traefik_backend
ports: ports:
- target: 8443 - target: 8443
published: 8443 published: 8443
protocol: tcp protocol: tcp
mode: host mode: host
- target: 3478 - target: 3478
published: 3478 published: 3478
protocol: udp protocol: udp
mode: host mode: host
- target: 10001 - target: 10001
published: 10001 published: 10001
protocol: udp protocol: udp
mode: host mode: host
- target: 8080 - target: 8080
published: 8080 published: 8080
protocol: tcp protocol: tcp
mode: host mode: host
- target: 1900 - target: 1900
published: 1900 published: 1900
protocol: udp protocol: udp
mode: host mode: host
- target: 8843 - target: 8843
published: 8843 published: 8843
protocol: tcp protocol: tcp
mode: host mode: host
- target: 8880 - target: 8880
published: 8880 published: 8880
protocol: tcp protocol: tcp
mode: host mode: host
- target: 6789 - target: 6789
published: 6789 published: 6789
protocol: tcp protocol: tcp
mode: host mode: host
- target: 5514 - target: 5514
published: 5514 published: 5514
protocol: udp protocol: udp
mode: host mode: host
volumes: volumes:
- "/volume1/docker/Unifi:/unifi" - "/volume1/docker/Unifi:/unifi"
# working_dir: "/unifi" # working_dir: "/unifi"
deploy: deploy:
labels: labels:
- traefik.enable=true - traefik.enable=true
- traefik.http.routers.unifi-network.entrypoints=websecure - traefik.http.routers.unifi-network.entrypoints=websecure
- traefik.http.routers.unifi-network.rule=${UNIFI_RULE} - traefik.http.routers.unifi-network.rule=${UNIFI_RULE}
- traefik.http.routers.unifi-network.tls=true - traefik.http.routers.unifi-network.tls=true
- traefik.http.routers.unifi-network.tls.certresolver=letsencrypt - traefik.http.routers.unifi-network.tls.certresolver=letsencrypt
- traefik.http.services.unifi-network.loadbalancer.server.port=8443 - traefik.http.services.unifi-network.loadbalancer.server.port=8443
# - traefik.http.services.unifi-network.loadbalancer.serverstransport=ignorecert # - traefik.http.services.unifi-network.loadbalancer.serversTransport=ignorecert
- traefik.http.services.unifi-network.loadbalancer.server.scheme=https - traefik.http.services.unifi-network.loadbalancer.server.scheme=https
- traefik.http.routers.unifi-network.service=unifi-network - traefik.http.routers.unifi-network.service=unifi-network
- traefik.http.routers.unifi-network.middlewares=crowdsec@file #forwardAuth-authentik@file - traefik.http.routers.unifi-network.middlewares=crowdsec@file #forwardAuth-authentik@file
# - traefik.http.routers.unifi-http.entrypoints=unifi-http # - traefik.http.routers.unifi-http.entrypoints=unifi-http
# - traefik.http.routers.unifi-http.rule=Host(`unifi.bryanmail.net`, `unifi.whooshh.net`) # - traefik.http.routers.unifi-http.rule=Host(`unifi.${DOMAIN}`, `unifi.${ALT_DOMAIN}`)
# - traefik.http.routers.unifi-http.tls=false # - traefik.http.routers.unifi-http.tls=false
# - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt # - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt
# - traefik.http.services.unifi-http.loadbalancer.server.port=8080 # - traefik.http.services.unifi-http.loadbalancer.server.port=8080
# - traefik.http.routers.unifi-http.service=unifi-http # - traefik.http.routers.unifi-http.service=unifi-http
# - traefik.tcp.routers.unifi-http.entrypoints=unifi-http # - traefik.tcp.routers.unifi-http.entrypoints=unifi-http
# - traefik.tcp.routers.unifi-http.rule=HostSNI(`*`) # - traefik.tcp.routers.unifi-http.rule=HostSNI(`*`)
# - traefik.http.routers.unifi-http.tls=true # - traefik.http.routers.unifi-http.tls=true
# - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt # - traefik.http.routers.unifi-http.tls.certresolver=letsencrypt
# - traefik.tcp.services.unifi-http.loadbalancer.server.port=8080 # - traefik.tcp.services.unifi-http.loadbalancer.server.port=8080
# - traefik.tcp.routers.unifi-http.service=unifi-http # - traefik.tcp.routers.unifi-http.service=unifi-http
# - traefik.tcp.routers.unifi-stun.entrypoints=unifi-stun # - traefik.tcp.routers.unifi-stun.entrypoints=unifi-stun
# - traefik.tcp.routers.unifi-stun.rule=HostSNI(`*`) # - traefik.tcp.routers.unifi-stun.rule=HostSNI(`*`)
# - traefik.tcp.services.unifi-stun.loadbalancer.server.port=3478 # - traefik.tcp.services.unifi-stun.loadbalancer.server.port=3478
# - traefik.tcp.routers.unifi-stun.service=unifi-stun # - traefik.tcp.routers.unifi-stun.service=unifi-stun
- traefik.swarm.network=backend - traefik.swarm.network=backend
- autoheal=true - autoheal=true
resources: resources:
limits: limits:
cpus: '4' cpus: '4'
memory: 1G memory: 1G
placement: placement:
constraints: constraints:
- node.hostname==docker-2 - node.hostname==docker-2
networks: networks:
traefik_backend: traefik_backend:
external: true external: true