From 696f76b1ef35bad9adfe2c9c808a7463547f5bb3 Mon Sep 17 00:00:00 2001
From: Jim Nicholson <thejimnicholson@gmail.com>
Date: Mon, 29 Nov 2021 00:10:28 -0800
Subject: [PATCH] Swarm-mode portainer

---
 portainer/deploy.sh                       | 7 +++++++
 portainer.yaml => portainer/portainer.yml | 9 +++++++--
 2 files changed, 14 insertions(+), 2 deletions(-)
 create mode 100644 portainer/deploy.sh
 rename portainer.yaml => portainer/portainer.yml (69%)

diff --git a/portainer/deploy.sh b/portainer/deploy.sh
new file mode 100644
index 0000000..fba60fa
--- /dev/null
+++ b/portainer/deploy.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+export DOMAIN=portainer.swarm.thejimnicholson.com
+export NODE_ID=$(docker info -f '{{.Swarm.NodeID}}')
+docker node update --label-add portainer.portainer-data=true $NODE_ID
+docker stack deploy -c portainer.yml portainer
+docker stack ps portainer
+docker service logs portainer_portainer
diff --git a/portainer.yaml b/portainer/portainer.yml
similarity index 69%
rename from portainer.yaml
rename to portainer/portainer.yml
index e8a3a30..45f9e3e 100644
--- a/portainer.yaml
+++ b/portainer/portainer.yml
@@ -17,7 +17,7 @@ services:
           - node.platform.os == linux
 
   portainer:
-    image: portainer/portainer-ce:2.9.3
+    image: portainer/portainer
     command: -H tcp://tasks.agent:9001 --tlsskipverify
     volumes:
       - portainer-data:/data
@@ -33,8 +33,13 @@ services:
         - traefik.enable=true
         - traefik.docker.network=traefik-public
         - traefik.constraint-label=traefik-public
-        - traefik.http.routers.portainer-http.rule=Host(`portainer.home.thejimnicholson.com`)
+        - traefik.http.routers.portainer-http.rule=Host(`${DOMAIN?Variable not set}`)
         - traefik.http.routers.portainer-http.entrypoints=http
+        - traefik.http.routers.portainer-http.middlewares=https-redirect
+        - traefik.http.routers.portainer-https.rule=Host(`${DOMAIN?Variable not set}`)
+        - traefik.http.routers.portainer-https.entrypoints=https
+        - traefik.http.routers.portainer-https.tls=true
+        - traefik.http.routers.portainer-https.tls.certresolver=le
         - traefik.http.services.portainer.loadbalancer.server.port=9000
 
 networks: