mirror of
https://github.com/cookiecutter/cookiecutter-django.git
synced 2024-09-22 20:09:12 +03:00
4021286be0
This is best effort checking of domain names and creating the traefik rules. These two checks should cover most of the use cases.
100 lines
2.5 KiB
YAML
100 lines
2.5 KiB
YAML
log:
|
|
level: INFO
|
|
|
|
entryPoints:
|
|
web:
|
|
# http
|
|
address: ":80"
|
|
|
|
web-secure:
|
|
# https
|
|
address: ":443"
|
|
{%- if cookiecutter.use_celery == 'y' %}
|
|
|
|
flower:
|
|
address: ":5555"
|
|
{%- endif %}
|
|
|
|
certificatesResolvers:
|
|
letsencrypt:
|
|
# https://docs.traefik.io/master/https/acme/#lets-encrypt
|
|
acme:
|
|
email: "{{ cookiecutter.email }}"
|
|
storage: /etc/traefik/acme/acme.json
|
|
# https://docs.traefik.io/master/https/acme/#httpchallenge
|
|
httpChallenge:
|
|
entryPoint: web
|
|
|
|
http:
|
|
{%- set domain_dots = cookiecutter.domain_name.count('.') %}
|
|
routers:
|
|
web-router:
|
|
{%- if domain_dots == 1 or (domain_dots == 2 and '.co.' in cookiecutter.domain_name) %}
|
|
rule: "Host(`{{ cookiecutter.domain_name }}`) || Host(`www.{{ cookiecutter.domain_name }}`)"
|
|
{% else %}
|
|
rule: "Host(`{{ cookiecutter.domain_name }}`)"
|
|
{%- endif %}
|
|
entryPoints:
|
|
- web
|
|
middlewares:
|
|
- redirect
|
|
- csrf
|
|
service: django
|
|
|
|
web-secure-router:
|
|
{%- if domain_dots == 1 or (domain_dots == 2 and '.co.' in cookiecutter.domain_name) %}
|
|
rule: "Host(`{{ cookiecutter.domain_name }}`) || Host(`www.{{ cookiecutter.domain_name }}`)"
|
|
{% else %}
|
|
rule: "Host(`{{ cookiecutter.domain_name }}`)"
|
|
{%- endif %}
|
|
entryPoints:
|
|
- web-secure
|
|
middlewares:
|
|
- csrf
|
|
service: django
|
|
tls:
|
|
# https://docs.traefik.io/master/routing/routers/#certresolver
|
|
certResolver: letsencrypt
|
|
{%- if cookiecutter.use_celery == 'y' %}
|
|
|
|
flower-secure-router:
|
|
rule: "Host(`{{ cookiecutter.domain_name }}`)"
|
|
entryPoints:
|
|
- flower
|
|
service: flower
|
|
tls:
|
|
# https://docs.traefik.io/master/routing/routers/#certresolver
|
|
certResolver: letsencrypt
|
|
{%- endif %}
|
|
|
|
middlewares:
|
|
redirect:
|
|
# https://docs.traefik.io/master/middlewares/redirectscheme/
|
|
redirectScheme:
|
|
scheme: https
|
|
permanent: true
|
|
csrf:
|
|
# https://docs.traefik.io/master/middlewares/headers/#hostsproxyheaders
|
|
# https://docs.djangoproject.com/en/dev/ref/csrf/#ajax
|
|
headers:
|
|
hostsProxyHeaders: ["X-CSRFToken"]
|
|
|
|
services:
|
|
django:
|
|
loadBalancer:
|
|
servers:
|
|
- url: http://django:5000
|
|
{%- if cookiecutter.use_celery == 'y' %}
|
|
|
|
flower:
|
|
loadBalancer:
|
|
servers:
|
|
- url: http://flower:5555
|
|
{%- endif %}
|
|
|
|
providers:
|
|
# https://docs.traefik.io/master/providers/file/
|
|
file:
|
|
filename: /etc/traefik/traefik.yml
|
|
watch: true
|