38 lines
1.9 KiB
YAML
38 lines
1.9 KiB
YAML
version: '3'
|
|
services:
|
|
meshcentral:
|
|
image: typhonragewind/meshcentral:latest
|
|
networks:
|
|
- traefik_backend
|
|
ports:
|
|
- 8086:443
|
|
environment:
|
|
- HOSTNAME=${MESHCENTRAL_HOST}
|
|
- REVERSE_PROXY=10.0.0.0/8
|
|
- REVERSE_PROXY_TLS_PORT=443
|
|
- IFRAME=false #set to true if you wish to enable iframe support
|
|
- ALLOW_NEW_ACCOUNTS=false #set to false if you want disable self-service creation of new accounts besides the first (admin)
|
|
- WEBRTC=false #set to true to enable WebRTC - per documentation it is not officially released with meshcentral, but is solid enough to work with. Use with caution
|
|
- BACKUPS_PW=${BACKUPS_PW} #password for the autobackup function
|
|
- BACKUP_INTERVAL=24 # Interval in hours for the autobackup function
|
|
- BACKUP_KEEP_DAYS=10 #number of days of backups the function keeps
|
|
volumes:
|
|
- /volume1/docker/meshcentral/data:/opt/meshcentral/meshcentral-data #config.json and other important files live here. A must for data persistence
|
|
- /volume1/docker/meshcentral/user_files:/opt/meshcentral/meshcentral-files #where file uploads for users live
|
|
- /volume1/docker/meshcentral/backups:/opt/meshcentral/meshcentral-backups #Backups location
|
|
deploy:
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.meshcentral.rule=Host(`${MESHCENTRAL_HOST}`)
|
|
- traefik.http.routers.meshcentral.tls=true
|
|
- traefik.http.routers.meshcentral.tls.certresolver=letsencrypt
|
|
- traefik.http.routers.meshcentral.entrypoints=websecure
|
|
- traefik.http.services.meshcentral.loadbalancer.server.port=443
|
|
- traefik.http.routers.meshcentral.middlewares=crowdsec@file
|
|
- traefik.swarm.network=traefik_backend
|
|
- traefik.http.services.meshcentral.loadbalancer.server.scheme=http
|
|
|
|
networks:
|
|
traefik_backend:
|
|
external: true
|