vault-wrap: Добавлена рабочая конфигурация traefik

docker-compose.yml

@@ -7,6 +7,7 @@ services:
     environment:
       - ACTION_ADDRESS=${ACTION_ADDRESS}
       - VAULT_ADDRESS=${VAULT_ADDRESS}
+      - LISTEN_PORT=443
       - TLS_KEY_FILE=${TLS_KEY_FILE}
       - TLS_CERT_FILE=${TLS_CERT_FILE}
       - TZ=Europe/Moscow
@@ -22,6 +23,42 @@ services:
         max-size: "10m"
         max-file: "5"
 
+  traefik:
+    image: traefik:v3.0
+    command:
+#      - --entrypoints.web.address=:80
+#      - --entrypoints.web-secure.address=:443
+#      - --providers.docker=true
+      - --providers.file.directory=/configuration/
+      - --providers.file.watch=true
+    volumes:
+      - ./configuration/:/configuration/
+      - ./traefik.yml:/traefik.yml:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - ./ssl/:/ssl/:ro
+    ports:
+      - 80:80
+      - 8080:8080
+      - 888:888
+      - 443:443
+    restart: always
+    networks:
+      - default
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.traefik.entrypoints=https"
+      - "traefik.http.routers.traefik.rule=Host(`runner1-prod.corp.samsonopt.ru`)"
+      - "traefik.http.routers.traefik.tls=true"
+#      - "traefik.http.routers.traefik.tls.certresolver=letsEncrypt"
+      - "traefik.http.routers.traefik.service=api@internal"
+      - "traefik.http.services.traefik-traefik.loadbalancer.server.port=888"
+
+networks:
+  default:
+    name: reverse-proxy
+    external: true
+
+
 volumes:
   vault-wrap-log:
   vault-wrap-conf: