rozic-dev-server/Nexcloud
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

fix docler-compsoe labales

Browse source
This commit is contained in:
Dejan R. 2025-12-01 09:10:43 +00:00
parent 6fb9512a0c
commit d9c8b7d661
1 changed files with 21 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
docker-compose.yml
View file

@ -44,27 +44,34 @@ services:
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik_default"
# HTTP → HTTPS redirect
- "traefik.http.routers.nextcloud.entrypoints=web"
- "traefik.http.routers.nextcloud.rule=Host(`nextcloud.rozic-dev.com`)"
- "traefik.http.routers.nextcloud.middlewares=nextcloud-https-redirect"
- "traefik.http.middlewares.nextcloud-https-redirect.redirectscheme.scheme=https"
- "traefik.http.middlewares.nextcloud-https-redirect.redirectscheme.permanent=true"
# HTTPS Router
# -------------------------------
# HTTP router (for ACME challenge)
# -------------------------------
- "traefik.http.routers.nextcloud-http.entrypoints=web"
- "traefik.http.routers.nextcloud-http.rule=Host(`nextcloud.rozic-dev.com`)"
- "traefik.http.routers.nextcloud-http.tls.certresolver=letsencrypt"
- "traefik.http.routers.nextcloud-http.service=noop@internal"
# -------------------------------
# HTTPS router (real traffic)
# -------------------------------
- "traefik.http.routers.nextcloud-secure.entrypoints=websecure"
- "traefik.http.routers.nextcloud-secure.rule=Host(`nextcloud.rozic-dev.com`)"
- "traefik.http.routers.nextcloud-secure.tls=true"
- "traefik.http.routers.nextcloud-secure.tls.certresolver=letsencrypt"
- "traefik.http.routers.nextcloud-secure.service=nextcloud"
- "traefik.http.routers.nextcloud-secure.middlewares=nextcloud-headers"
# Nextcloud-specific security headers
# -------------------------------
# Security headers middleware
# -------------------------------
- "traefik.http.middlewares.nextcloud-headers.headers.customFrameOptionsValue=SAMEORIGIN"
- "traefik.http.middlewares.nextcloud-headers.headers.customResponseHeaders.Strict-Transport-Security=max-age=15552000; includeSubDomains"
# Internal port inside container
# -------------------------------
# Service (internal port)
# -------------------------------
- "traefik.http.services.nextcloud.loadbalancer.server.port=80"
mariadb:
@ -107,4 +114,4 @@ services:
timeout: 5s
retries: 5
volumes:
- redis:/data
- redis:/data