Container nginx dédié, rattaché au réseau Docker de n8n pour réutiliser Traefik/Let's Encrypt déjà en place. Config versionnée dans deploy/. APP_BASE_URL configurée sur les Edge Functions pour le CORS. Testé en conditions réelles : upload invité + galerie admin fonctionnels depuis le domaine public.
30 lines
1.3 KiB
YAML
30 lines
1.3 KiB
YAML
services:
|
|
photobooth-front:
|
|
image: nginx:alpine
|
|
restart: always
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.photobooth.rule=Host(`photobooth.assistantaikev.eu`)
|
|
- traefik.http.routers.photobooth.tls=true
|
|
- traefik.http.routers.photobooth.entrypoints=web,websecure
|
|
- traefik.http.routers.photobooth.tls.certresolver=mytlschallenge
|
|
- traefik.http.middlewares.photobooth.headers.SSLRedirect=true
|
|
- traefik.http.middlewares.photobooth.headers.STSSeconds=315360000
|
|
- traefik.http.middlewares.photobooth.headers.browserXSSFilter=true
|
|
- traefik.http.middlewares.photobooth.headers.contentTypeNosniff=true
|
|
- traefik.http.middlewares.photobooth.headers.forceSTSHeader=true
|
|
- traefik.http.middlewares.photobooth.headers.SSLHost=assistantaikev.eu
|
|
- traefik.http.middlewares.photobooth.headers.STSIncludeSubdomains=true
|
|
- traefik.http.middlewares.photobooth.headers.STSPreload=true
|
|
- traefik.http.routers.photobooth.middlewares=photobooth@docker
|
|
- traefik.http.services.photobooth.loadbalancer.server.port=80
|
|
volumes:
|
|
- ./site:/usr/share/nginx/html:ro
|
|
- ./nginx-photobooth.conf:/etc/nginx/conf.d/default.conf:ro
|
|
networks:
|
|
- n8n_default
|
|
|
|
networks:
|
|
n8n_default:
|
|
external: true
|