initial production release 🎉

install/coolify-template.yml

@@ -0,0 +1,97 @@
+version: '3.8'
+
+services:
+  proxy:
+    image: traefik:v2.3
+    hostname: coollabs-proxy
+    ports:
+      - target: 80
+        published: 80
+        protocol: tcp
+        mode: host
+      - target: 443
+        published: 443
+        protocol: tcp
+        mode: host
+    command:
+      - --api.insecure=false
+      - --api.dashboard=false
+      - --api.debug=false
+      - --log.level=ERROR
+      - --providers.docker=true
+      - --providers.docker.swarmMode=true
+      - --providers.docker.exposedbydefault=false
+      - --providers.docker.network=${DOCKER_NETWORK}
+      - --entrypoints.web.address=:80
+      - --entrypoints.websecure.address=:443
+      - --certificatesresolvers.letsencrypt.acme.httpchallenge=true
+      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
+      - --certificatesresolvers.letsencrypt.acme.email=${EMAIL}
+      - --certificatesresolvers.letsencrypt.acme.storage=/data/coolify/acme.json
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /data/coolify:/data/coolify
+    networks:
+      - ${DOCKER_NETWORK}
+    deploy:
+      update_config:
+        parallelism: 1
+        delay: 10s
+        order: start-first
+      replicas: 1
+      placement:
+        constraints:
+          - node.role == manager
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.api.entrypoints=websecure"
+        - "traefik.http.routers.api.service=api@internal"
+        - "traefik.http.routers.api.middlewares=auth"
+        - "traefik.http.services.traefik.loadbalancer.server.port=80"
+        - "traefik.http.services.traefik.loadbalancer.server.port=443"
+
+        # Global redirect www to non-www
+        - "traefik.http.routers.www-catchall.rule=hostregexp(`{host:www.(.+)}`)"
+        - "traefik.http.routers.www-catchall.entrypoints=web"
+        - "traefik.http.routers.www-catchall.middlewares=redirect-www-to-nonwww"
+        - "traefik.http.middlewares.redirect-www-to-nonwww.redirectregex.regex=^http://(?:www\\.)?(.+)"
+        - "traefik.http.middlewares.redirect-www-to-nonwww.redirectregex.replacement=http://$$$${1}"
+
+        # Global redirect http to https
+        - "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)"
+        - "traefik.http.routers.http-catchall.entrypoints=web"
+        - "traefik.http.routers.http-catchall.middlewares=redirect-to-https"
+
+        - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.global-compress.compress=true"
+
+  coolify:
+    image: coolify
+    hostname: coollabs-coolify
+    env_file:
+      - .env
+    networks:
+      - ${DOCKER_NETWORK}
+    command: "yarn start"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    deploy:
+      update_config:
+        parallelism: 1
+        delay: 10s
+        order: start-first
+      replicas: 1
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.coolify.entrypoints=websecure"
+        - "traefik.http.routers.coolify.tls.certresolver=letsencrypt"
+        - "traefik.http.routers.coolify.rule=Host(`${DOMAIN}`) && PathPrefix(`/`)"
+        - "traefik.http.services.coolify.loadbalancer.server.port=3000"
+        - "traefik.http.routers.coolify.middlewares=global-compress"
+      
+networks:
+  ${DOCKER_NETWORK}:
+    driver: overlay
+    name: ${DOCKER_NETWORK}
+    external: true
+