“Traefikの設定を試行錯誤した結果を残しておく - おいら屋ファクトリー” https://ebith.hatenablog.jp/entry/2022/10/08/093118

docker-compose.yml

version: '3'

services:
  traefik:
    network_mode: host
    environment:
      - TZ=Asia/Tokyo
    restart: always
    image: traefik:v2.9
    command:
      - --api.insecure=true
      - --providers.docker
      - --providers.docker.exposedByDefault=false
      - --providers.file.filename=/tmp/external.yml
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --entrypoints.websecure.http.tls=true
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.http-catchall.rule=PathPrefix(`/`)'
      - 'traefik.http.routers.http-catchall.entrypoints=web'
      - 'traefik.http.routers.http-catchall.middlewares=redirect-to-https'
      - 'traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https'
      - 'traefik.http.services.api@internal.loadbalancer.server.port=8080'
      - 'traefik.http.routers.traefik.rule=(Host(`traefik.feelmy.net`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`)))'
      - 'traefik.http.routers.traefik.entrypoints=websecure'
      - 'traefik.http.routers.traefik.service=api@internal'
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./external.yml:/tmp/external.yml
      - /etc/letsencrypt/certificates/:/tmp/certs/
      

external.yml

tls:
  certificates:
    - certFile: /tmp/certs/feelmy.net.crt
      keyFile: /tmp/certs/feelmy.net.key
http:
  routers:
    remopi:
      rule: Host(`remopi.feelmy.net`)
      entrypoints: websecure
      service: remopi
    grafana:
      rule: Host(`grafana.feelmy.net`)
      entrypoints: websecure
      service: grafana
    chronograf:
      rule: Host(`chronograf.feelmy.net`)
      entrypoints: websecure
      service: chronograf
    node-red:
      rule: Host(`node-red.feelmy.net`)
      entrypoints: websecure
      service: node-red
    mega-s:
      rule: Host(`mega-s.feelmy.net`)
      entrypoints: websecure
      service: mega-s
  services:
    remopi:
      loadBalancer:
        servers:
          - url: http://192.168.0.81:42897/
    grafana:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:3000/
    chronograf:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:8888/
    node-red:
      loadBalancer:
        servers:
          - url: http://192.168.0.81:1880/
    mega-s:
      loadBalancer:
        servers:
          - url: http://192.168.0.253/