99 lines
3.1 KiB
YAML
99 lines
3.1 KiB
YAML
services:
|
|
traefik:
|
|
image: "traefik"
|
|
restart: always
|
|
command:
|
|
- "--api.insecure=true"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.web.http.redirections.entryPoint.to=websecure"
|
|
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--certificatesresolvers.mytlschallenge.acme.tlschallenge=true"
|
|
- "--certificatesresolvers.mytlschallenge.acme.email=${SSL_EMAIL}"
|
|
- "--certificatesresolvers.mytlschallenge.acme.storage=/letsencrypt/acme.json"
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
volumes:
|
|
- traefik_data:/letsencrypt
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
- ./crts:/opt/custom-certificates
|
|
|
|
n8n:
|
|
image: docker.n8n.io/n8nio/n8n
|
|
restart: always
|
|
ports:
|
|
- "127.0.0.1:5678:5678"
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.n8n.rule=Host(`${SUBDOMAIN}.${DOMAIN_NAME}`)
|
|
- traefik.http.routers.n8n.tls=true
|
|
- traefik.http.routers.n8n.entrypoints=web,websecure
|
|
- traefik.http.routers.n8n.tls.certresolver=mytlschallenge
|
|
- traefik.http.middlewares.n8n.headers.SSLRedirect=true
|
|
- traefik.http.middlewares.n8n.headers.STSSeconds=315360000
|
|
- traefik.http.middlewares.n8n.headers.browserXSSFilter=true
|
|
- traefik.http.middlewares.n8n.headers.contentTypeNosniff=true
|
|
- traefik.http.middlewares.n8n.headers.forceSTSHeader=true
|
|
- traefik.http.middlewares.n8n.headers.SSLHost=${DOMAIN_NAME}
|
|
- traefik.http.middlewares.n8n.headers.STSIncludeSubdomains=true
|
|
- traefik.http.middlewares.n8n.headers.STSPreload=true
|
|
- traefik.http.routers.n8n.middlewares=n8n@docker
|
|
environment:
|
|
- N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
|
|
- N8N_HOST=${SUBDOMAIN}.${DOMAIN_NAME}
|
|
- N8N_PORT=5678
|
|
- N8N_PROTOCOL=https
|
|
- N8N_RUNNERS_ENABLED=true
|
|
- NODE_ENV=production
|
|
- WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/
|
|
- GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
|
|
- TZ=${GENERIC_TIMEZONE}
|
|
volumes:
|
|
- n8n_data:/home/node/.n8n
|
|
- ./local-files:/files
|
|
- ./crts:/opt/custom-certificates
|
|
|
|
milvus:
|
|
image: milvusdb/milvus:latest
|
|
restart: always
|
|
ports:
|
|
- "19530:19530"
|
|
- "9091:9091"
|
|
environment:
|
|
- ETCD_ENDPOINTS=etcd:2379
|
|
- MINIO_ADDRESS=minio:9000
|
|
volumes:
|
|
- milvus_data:/var/lib/milvus
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:9091/healthz"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 30s
|
|
|
|
postgres:
|
|
image: postgres:15-alpine
|
|
restart: always
|
|
ports:
|
|
- "5432:5432"
|
|
environment:
|
|
- POSTGRES_DB=n8n_kb
|
|
- POSTGRES_USER=kb_user
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
volumes:
|
|
- postgres_data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U kb_user -d n8n_kb"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
start_period: 10s
|
|
|
|
volumes:
|
|
n8n_data:
|
|
traefik_data:
|
|
milvus_data:
|
|
postgres_data: |