Skip to content
Snippets Groups Projects
Commit 6eccf4dd authored by Nicolas Richart's avatar Nicolas Richart
Browse files

Update compose to use new dns config

parent 0bcb308c
Branches
No related tags found
No related merge requests found
...@@ -26,12 +26,18 @@ services: ...@@ -26,12 +26,18 @@ services:
- "39002:39002" - "39002:39002"
# The Web UI (enabled by --api.insecure=true) # The Web UI (enabled by --api.insecure=true)
- "8080:8080" # - "8080:8080"
volumes: volumes:
# So that Traefik can listen to the Docker events # So that Traefik can listen to the Docker events
- /work/scitas-ge/cryosparc-docker/traefik:/config - /work/scitas-ge/cryosparc-docker/traefik:/config
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
labels:
- "traefik.enable=true"
- "traefik.http.routers.traefik-dash.rule=Host(`traefik.kcryo.hpc.epfl.ch`)"
- "traefik.http.routers.traefik-dash.entrypoints=websecure"
- "traefik.http.services.traefik-dash.loadbalancer.server.port=8080"
- "traefik.http.routers.traefik-dash.tls.certresolver=scitasvault"
- "traefik.http.middlewares.https-redirect.redirectscheme.scheme=https"
whoami: whoami:
image: traefik/whoami image: traefik/whoami
...@@ -41,9 +47,16 @@ services: ...@@ -41,9 +47,16 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.whoami.rule=Host(`whoami.kcryo.hpc.epfl.ch`)" - "traefik.http.routers.whoami.rule=Host(`whoami.kcryo.hpc.epfl.ch`)"
- "traefik.http.routers.whoami.entrypoints=websecure" - "traefik.http.routers.whoami.entrypoints=web"
- "traefik.http.routers.whoami.middlewares=https-redirect"
- "traefik.http.services.whoami.loadbalancer.server.port=2001" - "traefik.http.services.whoami.loadbalancer.server.port=2001"
- "traefik.http.routers.whoami.tls.certresolver=scitasvault" - "traefik.http.routers.whoami.service=whoami"
- "traefik.http.routers.whoami-ssl.rule=Host(`whoami.kcryo.hpc.epfl.ch`)"
- "traefik.http.routers.whoami-ssl.entrypoints=websecure"
- "traefik.http.services.whoami-ssl.loadbalancer.server.port=2001"
- "traefik.http.routers.whoami-ssl.tls.certresolver=scitasvault"
- "traefik.http.routers.whoami-ssl.service=whoami"
networks: networks:
default: default:
name: reverse_proxy_traefik name: reverse_proxy_traefik
services: services:
cryosparc-${ACCOUNT}: cryosparc:
image: registry.hpc.epfl.ch/scitas/cryosparc-docker:latest image: registry.hpc.epfl.ch/scitas/cryosparc-docker:latest
environment: environment:
CRYOSPACE_ADD_JOB_LANES: 1 CRYOSPACE_ADD_JOB_LANES: 1
EXTERNAL_USER_FROM_LDAP: 1 EXTERNAL_USER_FROM_LDAP: 1
...@@ -9,42 +10,47 @@ services: ...@@ -9,42 +10,47 @@ services:
EXTERNAL_LDAP_GROUP_FILTER: "(|(cn=*-unit)(cn=hpc-*)(cn=*-soft))" EXTERNAL_LDAP_GROUP_FILTER: "(|(cn=*-unit)(cn=hpc-*)(cn=*-soft))"
EXTERNAL_LDAP_GROUP_MEMBER: "memberUid" EXTERNAL_LDAP_GROUP_MEMBER: "memberUid"
EXTERNAL_LDAP_USER_SEARCH: "uid" EXTERNAL_LDAP_USER_SEARCH: "uid"
CRYOSPARC_API_HOSTNAME: "${ACCOUNT_URL}.hpc.epfl.ch" CRYOSPARC_API_HOSTNAME: "${ACCOUNT_URL}.kcryo.hpc.epfl.ch"
CRYOSPARC_CACERT_DIR: "/ssoft/spack/external/cryosparc/certs/" CRYOSPARC_CACERT_DIR: "/ssoft/spack/external/cryosparc/certs/"
networks: networks:
default: default:
traefik: traefik:
container_name: cryosparc
container_name: ${CONTAINER_NAME}
env_file: env_file:
- stack.env - stack.env
volumes: volumes:
- /ssoft:/ssoft
- /etc/slurm:/etc/slurm
- /var/run/slurm:/var/run/slurm
- /home/${USERNAME}:/home/${USERNAME} - /home/${USERNAME}:/home/${USERNAME}
- /home/${USERNAME}/cryosparc/slurm:/app/slurm
- /work/${ACCOUNT}:/work/${ACCOUNT} - /work/${ACCOUNT}:/work/${ACCOUNT}
- /etc/slurm:/etc/slurm
- /var/run/slurm:/var/run/slurm
- /ssoft:/ssoft
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc.rule=Host(`${ACCOUNT_URL}.hpc.epfl.ch`)"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc.entrypoints=websecure"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc.service=${ACCOUNT_URL}-cryosparc"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc.tls.certresolver=scitasvault"
- "traefik.http.services.${ACCOUNT_URL}-cryosparc.loadbalancer.server.port=39000"
- "traefik.http.services.${ACCOUNT_URL}-cryosparc.loadbalancer.server.scheme=http"
- "traefik.tcp.routers.${ACCOUNT_URL}-cryosparc-mongo.rule=HostSNI(`${ACCOUNT_URL}.hpc.epfl.ch`)" - "traefik.http.routers.cryo-${ACCOUNT_URL}.rule=Host(`${ACCOUNT_URL}.kcryo.hpc.epfl.ch`)"
- "traefik.tcp.routers.${ACCOUNT_URL}-cryosparc-mongo.entrypoints=mongo" - "traefik.http.routers.cryo-${ACCOUNT_URL}.entrypoints=web"
- "traefik.tcp.routers.${ACCOUNT_URL}-cryosparc-mongo.service=${ACCOUNT_URL}-cryosparc-mongo" - "traefik.http.routers.cryo-${ACCOUNT_URL}.middlewares=https-redirect"
- "traefik.tcp.routers.${ACCOUNT_URL}-cryosparc-mongo.tls.certresolver=scitasvault" - "traefik.http.routers.cryo-${ACCOUNT_URL}.service=cryo-${ACCOUNT_URL}"
- "traefik.tcp.services.${ACCOUNT_URL}-cryosparc-mongo.loadbalancer.server.port=39001" - "traefik.http.services.cryo-${ACCOUNT_URL}.loadbalancer.server.port=39000"
- "traefik.http.routers.cryo-${ACCOUNT_URL}-ssl.rule=Host(`${ACCOUNT_URL}.kcryo.hpc.epfl.ch`)"
- "traefik.http.routers.cryo-${ACCOUNT_URL}-ssl.entrypoints=websecure"
- "traefik.http.routers.cryo-${ACCOUNT_URL}-ssl.service=cryo-${ACCOUNT_URL}"
- "traefik.http.routers.cryo-${ACCOUNT_URL}-ssl.tls.certresolver=scitasvault"
- "traefik.http.services.cryo-${ACCOUNT_URL}-ssl.loadbalancer.server.port=39000"
- "traefik.tcp.routers.cryo-${ACCOUNT_URL}-mongo.rule=HostSNI(`${ACCOUNT_URL}.kcryo.hpc.epfl.ch`)"
- "traefik.tcp.routers.cryo-${ACCOUNT_URL}-mongo.entrypoints=mongo"
- "traefik.tcp.routers.cryo-${ACCOUNT_URL}-mongo.service=cryo-${ACCOUNT_URL}-mongo"
- "traefik.tcp.routers.cryo-${ACCOUNT_URL}-mongo.tls.certresolver=scitasvault"
- "traefik.tcp.services.cryo-${ACCOUNT_URL}-mongo.loadbalancer.server.port=39001"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc-core.rule=Host(`${ACCOUNT_URL}.hpc.epfl.ch`)" - "traefik.http.routers.cryo-${ACCOUNT_URL}-core.rule=Host(`${ACCOUNT_URL}.kcryo.hpc.epfl.ch`)"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc-core.entrypoints=cryosparc-core" - "traefik.http.routers.cryo-${ACCOUNT_URL}-core.entrypoints=cryosparc-core"
- "traefik.http.routers.${ACCOUNT_URL}-cryosparc-core.service=${ACCOUNT_URL}-cryosparc-core" - "traefik.http.routers.cryo-${ACCOUNT_URL}-core.service=cryo-${ACCOUNT_URL}-core"
- "traefik.http.services.${ACCOUNT_URL}-cryosparc-core.loadbalancer.server.port=39002" - "traefik.http.services.cryo-${ACCOUNT_URL}-core.loadbalancer.server.port=39002"
- "traefik.http.services.${ACCOUNT_URL}-cryosparc-core.loadbalancer.server.scheme=http"
networks: networks:
default: default:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment