Skip to content

Instantly share code, notes, and snippets.

@jakubhajek
Last active April 27, 2020 11:06
Show Gist options
  • Save jakubhajek/d7d289c3dbacce07d63c1cab7488aa96 to your computer and use it in GitHub Desktop.
Save jakubhajek/d7d289c3dbacce07d63c1cab7488aa96 to your computer and use it in GitHub Desktop.
# docker stack deploy -c stack-app.yml app --with-registry-auth --prune
version: "3.7"
services:
backend:
image: jakubhajek/nodejs-backend:latest
healthcheck:
test: wget --quiet --tries=1 --spider http://localhost:3000/ || exit 1
interval: 3s
timeout: 1s
retries: 1
start_period: 5s
networks:
- app
deploy:
mode: replicated
replicas: 2
update_config:
failure_action: rollback
parallelism: 1
delay: 5s
restart_policy:
condition: on-failure
delay: 5s
max_attempts: 3
resources:
limits:
memory: 128M
frontend:
image: nginx:1.17-alpine
healthcheck:
test: wget --quiet --tries=1 --spider http://localhost:80/ || exit 1
interval: 3s
timeout: 1s
retries: 3
start_period: 5s
networks:
- app
- proxy-main
configs:
- source: nginx_config
target: /etc/nginx/nginx.conf
deploy:
mode: replicated
replicas: 2
update_config:
failure_action: rollback
parallelism: 1
delay: 10s
restart_policy:
condition: on-failure
delay: 10s
max_attempts: 3
labels:
- "traefik.enable=true"
- "traefik.http.routers.myapp.rule=Host(`node-app.labs.cometari.eu`)"
- "traefik.http.routers.myapp.tls.certresolver=le"
- "traefik.http.routers.myapp.entrypoints=websecure"
- "traefik.http.services.myapp.loadbalancer.server.port=80"
- "traefik.http.services.myapp.loadbalancer.passhostheader=true"
- "traefik.http.services.myapp.loadbalancer.healthcheck.path=/healthcheck"
- "traefik.http.services.myapp.loadbalancer.healthcheck.interval=100ms"
- "traefik.http.services.myapp.loadbalancer.healthcheck.timeout=75ms"
- "traefik.http.services.myapp.loadbalancer.healthcheck.scheme=http"
resources:
limits:
memory: 128MB
configs:
nginx_config:
name: nginx-config-${NGINX_CONFIG:-1}
file: ./nginx.conf
networks:
app:
driver: overlay
name: app
attachable: true
driver_opts:
encrypted: "true"
proxy-main:
external: true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment