locci-proxy/compose.yaml at main · muchuiwilliam/locci-proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
services:

  # ── Locci Proxy ─────────────────────────────────────────────────────────────
  locci-proxy:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: locci-proxy
    image: locci/proxy:latest
    restart: unless-stopped
    ports:
      - "8484:8484"   # Main proxy API
      - "8485:8485"   # Control API
    volumes:
      # Mount your config.yaml — set mode, upstreams, routes here
      # - ./config-lb.yaml:/app/config.yaml:ro
      - ./config.yaml:/app/config.yaml:ro
    environment:
      - RUST_LOG=${RUST_LOG:-info}
    networks:
      - locci-network
    labels:
      - "traefik.enable=true"

      # ── Main proxy (port 8484) ───────────────────────────────────────────────
      - "traefik.http.routers.proxy.rule=Host(`${PROXY_HOST:-proxy.locci.cloud}`)"
      - "traefik.http.routers.proxy.entrypoints=web"
      - "traefik.http.routers.proxy.middlewares=proxy-redirect"

      - "traefik.http.routers.proxy-secure.rule=Host(`${PROXY_HOST:-proxy.locci.cloud}`)"
      - "traefik.http.routers.proxy-secure.entrypoints=websecure"
      - "traefik.http.routers.proxy-secure.tls=true"
      - "traefik.http.routers.proxy-secure.tls.certresolver=letsencrypt"

      - "traefik.http.services.proxy.loadbalancer.server.port=8484"

      - "traefik.http.middlewares.proxy-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.proxy-redirect.redirectscheme.permanent=true"

      # ── Control API (port 8485) ──────────────────────────────────────────────
      - "traefik.http.routers.proxy-control.rule=Host(`${CONTROL_HOST:-control.proxy.locci.cloud}`)"
      - "traefik.http.routers.proxy-control.entrypoints=websecure"
      - "traefik.http.routers.proxy-control.tls=true"
      - "traefik.http.routers.proxy-control.tls.certresolver=letsencrypt"

      - "traefik.http.services.proxy-control.loadbalancer.server.port=8485"

networks:
  locci-network:
    name: locci-network
    driver: bridge