http to https redirection

docker-compose.yaml

@@ -30,7 +30,7 @@ services:
   gitdb:
    container_name: mariadb-git
    image: tobi312/rpi-mariadb:10.11-alpine
-   image: yobasystems/alpine-mariadb:10.5.9
+#   image: yobasystems/alpine-mariadb:10.5.9
    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    networks:
      - gitea
@@ -47,6 +47,64 @@ services:
      - ./databases/db-git:/var/lib/mysql
      - /etc/localtime:/etc/localtime:ro
 
+#############################################################################
+#####################		MariaDB	3		#####################
+#############################################################################
+  nextcloud-db:
+   container_name: mariadb-nextcloud
+   image: tobi312/rpi-mariadb:10.11-alpine
+#   image: yobasystems/alpine-mariadb:10.5.9
+   command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
+#   networks:
+   # ports:    
+   #   - "3326:3306"
+   #   - "3327:3307"
+   restart: unless-stopped
+   environment:
+     - MYSQL_ROOT_PASSWORD=${NEXTCLOUD_DB_ROOT}
+     - MYSQL_DATABASE=nextcloud
+     - MYSQL_USER=nextcloud
+     - MYSQL_PASSWORD=${NEXTCLOUD_DB_PW}
+   volumes:
+     - ./databases/db-nextcloud:/var/lib/mysql
+     - /etc/localtime:/etc/localtime:ro
+
+#############################################################################
+#####################		Nextcloud		#####################
+#############################################################################
+
+  nextcloud:
+    container_name: nextcloud
+    image: nextcloud:latest
+    restart: always
+    links:
+      - nextcloud-db
+    volumes:
+      - ./volumes/nextcloud:/var/www/html
+    environment:
+      - MYSQL_PASSWORD=${NEXTCLOUD_DB_PW}
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud
+      - MYSQL_HOST=nextcloud-db
+      - OVERWRITEPROTOCOL=https
+      - OVERWRITECLIURL=https://cloud.gerle.duckdns.org
+      - OVERWRITEHOST=cloud.gerle.duckdns.org
+    networks:
+      - dockernet
+      - default
+    labels:
+      - 'traefik.enable=true'
+      - 'traefik.http.routers.nextcloud.rule=Host(`cloud.gerle.duckdns.org`)'      
+      - "traefik.http.routers.nextcloud.entrypoints=websecure"
+      - "traefik.http.routers.nextcloud.tls.certResolver=letsencrypt"
+      - "traefik.http.routers.nextcloud.tls=true"
+      - 'traefik.http.services.nextcloud.loadbalancer.server.port=80'
+      - "traefik.http.routers.nextcloud.service=nextcloud"
+#      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.nextcloud.middlewares=nextcloud-dav" #,default@file"
+      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.regex=^/.well-known/ca(l|rd)dav"
+      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.replacement=/remote.php/dav/"
+      
 #############################################################################
 ######################		Vikunja Api		#####################
 #############################################################################
@@ -127,6 +185,11 @@ services:
       - ACME_DNS_API_BASE="http://10.0.0.8:4443"
       - ACME_DNS_STORAGE_PATH="/.lego-acme-dns-accounts.json"
       - DUCKDNS_TOKEN=${DUCKDNS}
+      - LEGO_DISABLE_CNAME_SUPPORT=true
+      - FREEMYIP_TOKEN=${FMIP_TOKEN}
+  #    - CF_API_EMAIL=${CLOUDFLARE_MAIL}
+#      - CF_API_KEY=${CLOUDFLARE_KEY}
+ #     - CF_DNS_API_TOKEN=${CLOUDFLARE_TOKEN}
     ports:
       - '80:80'
       - '8080:8080'
@@ -161,14 +224,66 @@ services:
     restart: 'unless-stopped'
     labels:
       - 'traefik.enable=true'
+
+      # - "traefik.http.routers.whoami-http.entrypoints=web"
+      # - "traefik.http.routers.whoami-http.rule=Host(`whoami.gerle.duckdns.org`)"
+      
       - 'traefik.http.routers.whoami.rule=Host(`whoami.gerle.duckdns.org`)'
       - 'traefik.http.services.whoami.loadbalancer.server.port=80'    
       - "traefik.http.routers.whoami.entrypoints=websecure"
       - "traefik.http.routers.whoami.tls.certResolver=letsencrypt"
+
+#      - "traefik.http.middlewares.whoami-https.redirectscheme.scheme=https"
     networks:
       - dockernet
 
 
+#############################################################################
+#####################		Baikal			#####################
+#############################################################################      
+#   baikal:
+#     container_name: baikal
+#     image: ckulka/baikal:latest
+#     restart: always
+#     labels:
+#       - 'traefik.enable=true'
+#       - 'traefik.http.routers.baikal.rule=Host(`baikal.gerle.duckdns.org`)'
+#       - 'traefik.http.services.baikal.loadbalancer.server.port=80'    
+#       - "traefik.http.routers.baikal.entrypoints=websecure"
+#       - "traefik.http.routers.baikal.tls.certResolver=letsencrypt"
+# #      traefik.port: 80
+#       # Traefik middleware required for iOS, see https://github.com/ckulka/baikal-docker/issues/37.
+#       # When using a Traefik provider file (YAML/TOML) instead of these labels, remove the escape
+#       # character from "*.redirectregex.replacement" - it's only needed in Docker Compose YAML files:
+#       # redirectRegex:
+#       #   replacement: "https://$1/dav/php/
+#       - 'traefik.http.middlewares.baikal-dav.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav'
+#       - 'traefik.http.middlewares.baikal-dav.redirectregex.replacement=https://$$1/dav.php/'
+#       - 'traefik.http.middlewares.baikal-dav.redirectregex.permanent=true'
+#       - 'traefik.http.routers.baikal.middlewares=baikal-dav'
+#     volumes:
+#       - ./volumes/baikal-config:/var/www/baikal/config
+#       - ./volumes/baikal-data:/var/www/baikal/Specific
+#     networks:
+#       - dockernet
+#       - default
+
+
+  # acmedns:
+  #   build:
+  #     context: .
+  #     dockerfile: Dockerfile
+  #   image: joohoi/acme-dns:latest
+  #   ports:
+  #     - "443:443"
+  #     - "53:53"
+  #     - "53:53/udp"
+  #     - "80:80"
+  #   volumes:
+  #     - ./volumes/acmedns-config:/etc/acme-dns:ro
+  #     - ./volumes/acmedns-data:/var/lib/acme-dns
+
+      
 #############################################################################
 #####################		GiTea			#####################
 #############################################################################

traefik.yaml

@@ -1,6 +1,13 @@
 entryPoints:
   web:
     address: ":80"
+    http:
+      redirections:
+        entrypoint:
+          to: "websecure"
+          scheme: "https"
+          permanent: true
+      
 
   websecure:
     address: ":443"
@@ -38,7 +45,7 @@ certificatesResolvers:
       storage: acme.json
       dnsChallenge:
         provider: duckdns
-        delayBeforeCheck: 0        
+        delayBeforeCheck: 30
         resolvers:
           - "1.1.1.1:53"
           - "8.8.8.8:53"