Co-authored-by: ulfrxdev <r.rafal.r9@gmail.com> Co-committed-by: ulfrxdev <r.rafal.r9@gmail.com>
28 lines
1.4 KiB
YAML
28 lines
1.4 KiB
YAML
services:
|
|
homepage:
|
|
image: ghcr.io/gethomepage/homepage:v1.10.1@sha256:4815be05c8abf3503272b7ff1ac40c5f7364602a1ed807b0fc5a4cf69df0b15b
|
|
container_name: homepage
|
|
restart: unless-stopped
|
|
environment:
|
|
- HOMEPAGE_ALLOWED_HOSTS=${HOMEPAGE_DOMAIN}
|
|
networks:
|
|
- homelab_apps
|
|
volumes:
|
|
- ./config:/app/config
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=homelab_apps"
|
|
- "traefik.http.routers.homepage.rule=Host(`${HOMEPAGE_DOMAIN}`)"
|
|
- "traefik.http.routers.homepage.entrypoints=websecure"
|
|
- "traefik.http.routers.homepage.tls=true"
|
|
- "traefik.http.routers.homepage.tls.certresolver=le"
|
|
- "traefik.http.services.homepage.loadbalancer.server.port=3000"
|
|
|
|
- "traefik.http.middlewares.authentik.forwardauth.address=http://authentik-server-1:9000/outpost.goauthentik.io/auth/traefik"
|
|
- "traefik.http.middlewares.authentik.forwardauth.trustForwardHeader=true"
|
|
- "traefik.http.middlewares.authentik.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"
|
|
- "traefik.http.routers.homepage.middlewares=authentik"
|
|
|
|
networks:
|
|
homelab_apps:
|
|
external: true |