43 lines
938 B
Plaintext
43 lines
938 B
Plaintext
|
[Unit]
|
||
|
|
Description=Traefik Reverse Proxy
|
||
|
|
Documentation=https://doc.traefik.io/traefik/providers/docker
|
||
|
|
|
||
|
|
[Container]
|
||
|
|
ContainerName=traefik
|
||
|
|
Image=docker.io/library/traefik:{{ traefik_version }}
|
||
|
|
Environment=TZ=Europe/Berlin
|
||
|
|
|
||
|
|
#Environment=CLOUDFLARE_DNS_API_TOKEN=<REDACTED>
|
||
|
|
|
||
|
|
PublishPort=0.0.0.0:80:80/tcp
|
||
|
|
PublishPort=0.0.0.0:443:443/tcp
|
||
|
|
PublishPort=0.0.0.0:8080:8080/tcp
|
||
|
|
|
||
|
|
#Network=pasta:-T,auto
|
||
|
|
Network=traefik.network
|
||
|
|
|
||
|
|
Volume=/etc/traefik:/etc/traefik:rw
|
||
|
|
Volume=/var/run/podman/podman.sock:/var/run/docker.sock:ro
|
||
|
|
|
||
|
|
NoNewPrivileges=true
|
||
|
|
DropCapability=All
|
||
|
|
AddCapability=net_bind_service
|
||
|
|
|
||
|
|
#UserNS=keep-id
|
||
|
|
# Required to access the Podman Socket
|
||
|
|
#SecurityLabelDisable=true
|
||
|
|
PodmanArgs=--userns=keep-id --security-opt label=disable
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Restart=on-failure
|
||
|
|
# Restart Delay
|
||
|
|
RestartSec=30
|
||
|
|
# Allowed time for the service to start.
|
||
|
|
TimeoutStartSec=90
|
||
|
|
# Allowed time for the service to stop.
|
||
|
|
TimeoutStopSec=90
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=default.target
|
||
|
|
|