4aba68dd37
- Clarify that EASYHAPROXY_CERTBOT_AUTOCONFIG or CERTBOT_SERVER is required - Add complete docker-compose.yml examples for ACME setup - Explain SSL termination at HAProxy level vs backend containers - Reorganize SSL docs to emphasize volume method over label method - Add troubleshooting section for common ACME warnings - Clarify certificate storage paths and selection priority - Add examples showing both ACME and manual certificates together Resolves confusion about ACME configuration requirements and makes it clear that volume-mounted certificates are the recommended method for manual SSL certificates.
37 lines
933 B
YAML
37 lines
933 B
YAML
services:
|
|
easyhaproxy:
|
|
image: byjg/easy-haproxy:5.0.0
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- certs_certbot:/etc/easyhaproxy/certs/certbot
|
|
- certs_haproxy:/etc/easyhaproxy/certs/haproxy
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "-u", "admin:password", "http://localhost:1936"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
start_period: 30s
|
|
retries: 3
|
|
environment:
|
|
EASYHAPROXY_DISCOVER: docker
|
|
EASYHAPROXY_LABEL_PREFIX: easyhaproxy
|
|
EASYHAPROXY_CERTBOT_EMAIL: changeme@example.org
|
|
EASYHAPROXY_SSL_MODE: "default"
|
|
HAPROXY_CUSTOMERRORS: "true"
|
|
HAPROXY_USERNAME: admin
|
|
HAPROXY_PASSWORD: password
|
|
HAPROXY_STATS_PORT: 1936
|
|
|
|
ports:
|
|
- "80:80/tcp"
|
|
- "443:443/tcp"
|
|
- "1936:1936/tcp"
|
|
|
|
volumes:
|
|
certs_certbot:
|
|
# external: true
|
|
certs_haproxy:
|
|
# external: true
|
|
|
|
networks:
|
|
easyhaproxy:
|
|
# external: true
|