portainer/deploy.sh

@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-export DOMAIN=portainer.swarm.thejimnicholson.com
-export NODE_ID=$(docker info -f '{{.Swarm.NodeID}}')
-docker node update --label-add portainer.portainer-data=true $NODE_ID
-docker stack deploy -c portainer.yml portainer
-docker stack ps portainer
-docker service logs portainer_portainer

portainer/portainer.yml

@@ -1,52 +0,0 @@
-version: '3.3'
-
-services:
-  agent:
-    image: portainer/agent:2.9.3
-    environment:
-      AGENT_CLUSTER_ADDR: tasks.agent
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-      - /var/lib/docker/volumes:/var/lib/docker/volumes
-    networks:
-      - agent-network
-    deploy:
-      mode: global
-      placement:
-        constraints:
-          - node.platform.os == linux
-
-  portainer:
-    image: portainer/portainer-ce:2.9.3
-    command: -H tcp://tasks.agent:9001 --tlsskipverify
-    volumes:
-      - portainer-data:/data
-    networks:
-      - agent-network
-      - traefik-public
-    deploy:
-      placement:
-        constraints:
-          - node.role == manager
-          - node.labels.portainer.portainer-data == true
-      labels:
-        - traefik.enable=true
-        - traefik.docker.network=traefik-public
-        - traefik.constraint-label=traefik-public
-        - traefik.http.routers.portainer-http.rule=Host(`${DOMAIN?Variable not set}`)
-        - traefik.http.routers.portainer-http.entrypoints=http
-        - traefik.http.routers.portainer-http.middlewares=https-redirect
-        - traefik.http.routers.portainer-https.rule=Host(`${DOMAIN?Variable not set}`)
-        - traefik.http.routers.portainer-https.entrypoints=https
-        - traefik.http.routers.portainer-https.tls=true
-        - traefik.http.routers.portainer-https.tls.certresolver=le
-        - traefik.http.services.portainer.loadbalancer.server.port=9000
-
-networks:
-  agent-network:
-    attachable: true
-  traefik-public:
-    external: true
-
-volumes:
-  portainer-data:

traefik/deploy.sh

@@ -1,10 +0,0 @@
-#!/usr/bin/env bash
-docker network create --driver=overlay traefik-public
-export NODE_ID=$(docker info -f '{{.Swarm.NodeID}}')
-docker node update --label-add traefik-public.traefik-public-certificates=true $NODE_ID
-export EMAIL=thejimnicholson@gmail.com
-export DOMAIN=traefik.swarm.thejimnicholson.com
-export USERNAME=jim
-export PASSWORD=Call1_advent
-export HASHED_PASSWORD=$(openssl passwd -apr1 $PASSWORD)
-docker stack deploy -c traefik.yml traefik

traefik/traefik.yml

@@ -1,98 +0,0 @@
-version: '3.3'
-
-services:
-
-  traefik:
-    # Use the latest v2.2.x Traefik image available
-    image: traefik:v2.2
-    ports:
-      # Listen on port 80, default for HTTP, necessary to redirect to HTTPS
-      - 80:80
-      # Listen on port 443, default for HTTPS
-      - 443:443
-    deploy:
-      placement:
-        constraints:
-          # Make the traefik service run only on the node with this label
-          # as the node with it has the volume for the certificates
-          - node.labels.traefik-public.traefik-public-certificates == true
-      labels:
-        # Enable Traefik for this service, to make it available in the public network
-        - traefik.enable=true
-        # Use the traefik-public network (declared below)
-        - traefik.docker.network=traefik-public
-        # Use the custom label "traefik.constraint-label=traefik-public"
-        # This public Traefik will only use services with this label
-        # That way you can add other internal Traefik instances per stack if needed
-        - traefik.constraint-label=traefik-public
-        # admin-auth middleware with HTTP Basic auth
-        # Using the environment variables USERNAME and HASHED_PASSWORD
-        - traefik.http.middlewares.admin-auth.basicauth.users=${USERNAME?Variable not set}:${HASHED_PASSWORD?Variable not set}
-        # https-redirect middleware to redirect HTTP to HTTPS
-        # It can be re-used by other stacks in other Docker Compose files
-        - traefik.http.middlewares.https-redirect.redirectscheme.scheme=https
-        - traefik.http.middlewares.https-redirect.redirectscheme.permanent=true
-        # traefik-http set up only to use the middleware to redirect to https
-        # Uses the environment variable DOMAIN
-        - traefik.http.routers.traefik-public-http.rule=Host(`${DOMAIN?Variable not set}`)
-        - traefik.http.routers.traefik-public-http.entrypoints=http
-        - traefik.http.routers.traefik-public-http.middlewares=https-redirect
-        # traefik-https the actual router using HTTPS
-        # Uses the environment variable DOMAIN
-        - traefik.http.routers.traefik-public-https.rule=Host(`${DOMAIN?Variable not set}`)
-        - traefik.http.routers.traefik-public-https.entrypoints=https
-        - traefik.http.routers.traefik-public-https.tls=true
-        # Use the special Traefik service api@internal with the web UI/Dashboard
-        - traefik.http.routers.traefik-public-https.service=api@internal
-        # Use the "le" (Let's Encrypt) resolver created below
-        - traefik.http.routers.traefik-public-https.tls.certresolver=le
-        # Enable HTTP Basic auth, using the middleware created above
-        - traefik.http.routers.traefik-public-https.middlewares=admin-auth
-        # Define the port inside of the Docker service to use
-        - traefik.http.services.traefik-public.loadbalancer.server.port=8080
-    volumes:
-      # Add Docker as a mounted volume, so that Traefik can read the labels of other services
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-      # Mount the volume to store the certificates
-      - traefik-public-certificates:/certificates
-    command:
-      # Enable Docker in Traefik, so that it reads labels from Docker services
-      - --providers.docker
-      # Add a constraint to only use services with the label "traefik.constraint-label=traefik-public"
-      - --providers.docker.constraints=Label(`traefik.constraint-label`, `traefik-public`)
-      # Do not expose all Docker services, only the ones explicitly exposed
-      - --providers.docker.exposedbydefault=false
-      # Enable Docker Swarm mode
-      - --providers.docker.swarmmode
-      # Create an entrypoint "http" listening on port 80
-      - --entrypoints.http.address=:80
-      # Create an entrypoint "https" listening on port 443
-      - --entrypoints.https.address=:443
-      # Create the certificate resolver "le" for Let's Encrypt, uses the environment variable EMAIL
-      - --certificatesresolvers.le.acme.email=${EMAIL?Variable not set}
-      # Store the Let's Encrypt certificates in the mounted volume
-      - --certificatesresolvers.le.acme.storage=/certificates/acme.json
-      # Use the TLS Challenge for Let's Encrypt
-      - --certificatesresolvers.le.acme.tlschallenge=true
-      # Enable the access log, with HTTP requests
-      - --accesslog
-      # Enable the Traefik log, for configurations and errors
-      - --log
-      # Enable the Dashboard and API
-      - --api
-    networks:
-      # Use the public network created to be shared between Traefik and
-      # any other service that needs to be publicly available with HTTPS
-      - traefik-public
-
-volumes:
-  # Create a volume to store the certificates, there is a constraint to make sure
-  # Traefik is always deployed to the same Docker node with the same volume containing
-  # the HTTPS certificates
-  traefik-public-certificates:
-
-networks:
-  # Use the previously created public network "traefik-public", shared with other
-  # services that need to be publicly available via this Traefik
-  traefik-public:
-    external: true

uptime-service.yaml

@@ -0,0 +1,21 @@
+version: '3.3'
+
+services:
+  uptime:
+    image: louislam/uptime-kuma:1
+    volumes:
+      - uptime-volume:/config
+    networks:
+      - traefik-public
+    deploy:
+      labels:
+        traefik.enable: "true"
+        traefik.constraint-label: "traefik-public"
+        traefik.http.routers.uptime-http.rule: "Host(`uptime.home.thejimnicholson.com`)"
+        traefik.http.routers.uptime-http.entrypoints: "http"
+        traefik.http.services.uptime.loadbalancer.server.port: 3001
+networks:
+  traefik-public:
+    external: true
+volumes:
+  uptime-volume: