EOX GitLab Instance

Skip to content
Snippets Groups Projects
Commit 7a88556d authored by Lubomir Dolezal's avatar Lubomir Dolezal
Browse files

update vhr18 docker compose yaml

parent 3f912d5e
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
docker-compose.vhr18.ops.yml
+ 17
− 11
View file @ 7a88556d
......@@ -10,25 +10,26 @@ services:
environment:
INSTALL_DIR: "/var/www/pvs/ops/"
deploy:
replicas: 3
labels:
# router for basic auth based access (https)
- "traefik.http.routers.vhr18-renderer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`)"
- "traefik.http.routers.vhr18-renderer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`)"
- "traefik.http.routers.vhr18-renderer.middlewares=auth@file,compress@file"
- "traefik.http.routers.vhr18-renderer.tls=true"
- "traefik.http.routers.vhr18-renderer.tls.certresolver=default"
- "traefik.http.routers.vhr18-renderer.entrypoints=https"
# router for basic auth based access (http)
- "traefik.http.routers.vhr18-renderer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`)"
- "traefik.http.routers.vhr18-renderer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`)"
- "traefik.http.routers.vhr18-renderer-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-renderer-redirect.entrypoints=http"
# router for referrer based access (https)
- "traefik.http.routers.vhr18-renderer_referer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|vhr18.pvs.prism.eox.at)/?`)"
- "traefik.http.routers.vhr18-renderer_referer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`) && HeadersRegexp(`Referer`, `https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|panda-demo.copernicus.eu|cdsportal-demo.copernicus.eu|ocqc-demo.copernicus.eu|vhr18.pvs.prism.eox.at|vhr18.pdas.prism.eox.at|vhr18.pass.copernicus.eu)/?"
- "traefik.http.routers.vhr18-renderer_referer.middlewares=compress@file"
- "traefik.http.routers.vhr18-renderer_referer.tls=true"
- "traefik.http.routers.vhr18-renderer_referer.tls.certresolver=default"
- "traefik.http.routers.vhr18-renderer_referer.entrypoints=https"
# router for referrer based access (http)
- "traefik.http.routers.vhr18-renderer_referer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|vhr18.pvs.prism.eox.at)/?`)"
- "traefik.http.routers.vhr18-renderer_referer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`) && PathPrefix(`/ows`, `/opensearch`, `/admin`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|panda-demo.copernicus.eu|cdsportal-demo.copernicus.eu|ocqc-demo.copernicus.eu|vhr18.pvs.prism.eox.at|vhr18.pdas.prism.eox.at|vhr18.pass.copernicus.eu)/?`)"
- "traefik.http.routers.vhr18-renderer_referer-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-renderer_referer-redirect.entrypoints=http"
# general
......@@ -39,7 +40,7 @@ services:
- "traefik.enable=true"
resources:
limits:
memory: 12G #TODO 4G ended up with many processes in D state, supposedly because of swapping
memory: 8G
networks:
- extnet
cache:
......@@ -50,23 +51,24 @@ services:
labels:
- "traefik.http.middlewares.cache-stripprefix.stripprefix.prefixes=/cache"
# router for basic auth based access (https)
- "traefik.http.routers.vhr18-cache.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/cache`)"
- "traefik.http.routers.vhr18-cache.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`, `vhr18.pass.copernicus.eu`, `a.vhr18.pass.copernicus.eu`, `b.vhr18.pass.copernicus.eu`, `c.vhr18.pass.copernicus.eu`, `d.vhr18.pass.copernicus.eu`, `e.vhr18.pass.copernicus.eu`, `f.vhr18.pass.copernicus.eu`, `g.vhr18.pass.copernicus.eu`, `h.vhr18.pass.copernicus.eu`) && PathPrefix(`/cache`)"
- "traefik.http.routers.vhr18-cache.middlewares=auth@file,cache-stripprefix,compress@file"
- "traefik.http.routers.vhr18-cache.tls=true"
- "traefik.http.routers.vhr18-cache.tls.certresolver=default"
- "traefik.http.routers.vhr18-cache.entrypoints=https"
# router for basic auth based access (http)
- "traefik.http.routers.vhr18-cache-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/cache`)"
- "traefik.http.routers.vhr18-cache-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`, `vhr18.pass.copernicus.eu`, `a.vhr18.pass.copernicus.eu`, `b.vhr18.pass.copernicus.eu`, `c.vhr18.pass.copernicus.eu`, `d.vhr18.pass.copernicus.eu`, `e.vhr18.pass.copernicus.eu`, `f.vhr18.pass.copernicus.eu`, `g.vhr18.pass.copernicus.eu`, `h.vhr18.pass.copernicus.eu`) && PathPrefix(`/cache`)"
- "traefik.http.routers.vhr18-cache-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-cache-redirect.entrypoints=http"
# router for referrer based access (https)
- "traefik.http.routers.vhr18-cache_referer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/cache`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|vhr18.pvs.prism.eox.at)/?`)"
- "traefik.http.routers.vhr18-cache_referer.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`, `vhr18.pass.copernicus.eu`, `a.vhr18.pass.copernicus.eu`, `b.vhr18.pass.copernicus.eu`, `c.vhr18.pass.copernicus.eu`, `d.vhr18.pass.copernicus.eu`, `e.vhr18.pass.copernicus.eu`, `f.vhr18.pass.copernicus.eu`, `g.vhr18.pass.copernicus.eu`, `h.vhr18.pass.copernicus.eu`) && PathPrefix(`/cache`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|panda-demo.copernicus.eu|cdsportal-demo.copernicus.eu|ocqc-demo.copernicus.eu|vhr18.pvs.prism.eox.at|vhr18.pdas.prism.eox.at|vhr18.pass.copernicus.eu)/?`)"
- "traefik.http.routers.vhr18-cache_referer.middlewares=cache-stripprefix,compress@file"
- "traefik.http.routers.vhr18-cache_referer.tls=true"
- "traefik.http.routers.vhr18-cache_referer.tls.certresolver=default"
- "traefik.http.routers.vhr18-cache_referer.entrypoints=https"
# router for referrer based access (http)
- "traefik.http.routers.vhr18-cache_referer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`) && PathPrefix(`/cache`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|vhr18.pvs.prism.eox.at)/?`)"
- "traefik.http.routers.vhr18-cache_referer-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `a.vhr18.pvs.prism.eox.at`, `b.vhr18.pvs.prism.eox.at`, `c.vhr18.pvs.prism.eox.at`, `d.vhr18.pvs.prism.eox.at`, `e.vhr18.pvs.prism.eox.at`, `f.vhr18.pvs.prism.eox.at`, `g.vhr18.pvs.prism.eox.at`, `h.vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`, `a.vhr18.pdas.prism.eox.at`, `b.vhr18.pdas.prism.eox.at`, `c.vhr18.pdas.prism.eox.at`, `d.vhr18.pdas.prism.eox.at`, `e.vhr18.pdas.prism.eox.at`, `f.vhr18.pdas.prism.eox.at`, `g.vhr18.pdas.prism.eox.at`, `h.vhr18.pdas.prism.eox.at`, `vhr18.pass.copernicus.eu`, `a.vhr18.pass.copernicus.eu`, `b.vhr18.pass.copernicus.eu`, `c.vhr18.pass.copernicus.eu`, `d.vhr18.pass.copernicus.eu`, `e.vhr18.pass.copernicus.eu`, `f.vhr18.pass.copernicus.eu`, `g.vhr18.pass.copernicus.eu`, `h.vhr18.pass.copernicus.eu`) && PathPrefix(`/cache`) && HeadersRegexp(`Referer`, `(https?://)?(panda.copernicus.eu|panda.cdsv3.eu|panda-demo.ondaprism.eu|panda-demo.copernicus.eu|cdsportal-demo.copernicus.eu|ocqc-demo.copernicus.eu|vhr18.pvs.prism.eox.at|vhr18.pdas.prism.eox.at|vhr18.pass.copernicus.eu)/?`)"
- "traefik.http.routers.vhr18-cache_referer-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-cache_referer-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-cache_referer-redirect.entrypoints=http"
# general
......@@ -75,6 +77,10 @@ services:
- "traefik.docker.network=vhr18-extnet"
- "traefik.docker.lbswarm=true"
- "traefik.enable=true"
resources:
limits:
memory: 8G
replicas: 3
networks:
- extnet
registrar:
......@@ -87,13 +93,13 @@ services:
deploy:
labels:
# router for basic auth based access (https)
- "traefik.http.routers.vhr18-client.rule=Host(`vhr18.pvs.prism.eox.at`)"
- "traefik.http.routers.vhr18-client.rule=Host(`vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`)"
- "traefik.http.routers.vhr18-client.middlewares=auth@file,compress@file"
- "traefik.http.routers.vhr18-client.tls=true"
- "traefik.http.routers.vhr18-client.tls.certresolver=default"
- "traefik.http.routers.vhr18-client.entrypoints=https"
# router for basic auth based access (http)
- "traefik.http.routers.vhr18-client-redirect.rule=Host(`vhr18.pvs.prism.eox.at`)"
- "traefik.http.routers.vhr18-client-redirect.rule=Host(`vhr18.pvs.prism.eox.at`, `vhr18.pdas.prism.eox.at`)"
- "traefik.http.routers.vhr18-client-redirect.middlewares=redirect@file"
- "traefik.http.routers.vhr18-client-redirect.entrypoints=http"
# general
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment