diff --git a/contrib/swarm-deploy/configs/advanced-config.php b/contrib/swarm-deploy/configs/advanced-config.php new file mode 100644 index 0000000..ec4a7c2 --- /dev/null +++ b/contrib/swarm-deploy/configs/advanced-config.php @@ -0,0 +1,2 @@ +" + HTTPS_SERVER_NAME: "" + LOG_LEVEL: "info" + PHP_MEMORY_LIMIT: "256M" + UPLOAD_MAX_FILESIZE: "8M" + DB_CONNECTION: sqlite + configs: + - source: llc_advanced_config + target: /htdocs/config/advanced-config.php + volumes: + - llc_data:/data + networks: + - traefik-public + deploy: + mode: replicated + replicas: 1 + + resources: + limits: + cpus: "0.5" + memory: 512M + + placement: + constraints: + - node.labels.hetzner_location == nbg1 + + labels: + - "traefik.docker.network=traefik-public" + + - "traefik.enable=true" + + - "traefik.http.routers.llc-frontend-prod.rule=Host(`links.`)" + - "traefik.http.routers.llc-frontend-prod.entrypoints=http" + - "traefik.http.services.llc-frontend-prod.loadbalancer.server.port=80" + - "traefik.http.routers.llc-frontend-prod.service=llc-frontend-prod" + - "traefik.http.routers.llc-frontend-prod.middlewares=llc-https-header" + + - "traefik.http.middlewares.llc-https-header.headers.customrequestheaders.X-Forwarded-Proto=https" + - "traefik.http.middlewares.llc-https-header.headers.contentSecurityPolicy=upgrade-insecure-requests" + - "traefik.constraint-label=traefik-public" + +networks: + traefik-public: + external: true + +configs: + llc_advanced_config: + file: ./configs/advanced-config.php + +volumes: + llc_data: + # driver: hetzner-volume + # driver_opts: + # size: "10" + # fstype: ext4