tls fixes

This commit is contained in:
PB
2022-12-04 07:19:55 +01:00
parent 047888cf47
commit 80e8a2ac4e
2 changed files with 88 additions and 8 deletions

View File

@@ -4,18 +4,21 @@ services:
# INFRASTRUCTURE SERVICES
api-gateway:
image: git.pbiernat.dev/egommerce/api-gateway:dev
hostname: gw.egommerce.pbiernat.dev
hostname: egommerce.pbiernat.dev
environment:
- APP_DOMAIN=gw.egommerce.pbiernat.dev
- APP_DOMAIN=egommerce.pbiernat.dev
labels:
- traefik.enable=true
- traefik.http.routers.api-gateway.rule=PathPrefix(`/admin/gateway`)
- traefik.http.routers.api-gateway.tls=true
- traefik.http.routers.api-gateway.entryPoints=https
- traefik.http.routers.api-gateway.service=api-gateway
- traefik.http.services.api-gateway.loadbalancer.server.scheme=http
- traefik.http.services.api-gateway.loadbalancer.server.port=8080
- traefik.tls.certificates.certfile=/certs/client.cert
- traefik.tls.certificates.keyfile=/certs/client.key
volumes:
- ./certs:/etc/traefik/certs
- ./certs/api-gateway:/etc/traefik/certs
api-registry:
image: git.pbiernat.dev/egommerce/api-registry:dev
@@ -24,11 +27,20 @@ services:
- APP_DOMAIN=registry.egommerce.pbiernat.dev
labels:
- traefik.enable=true
- traefik.http.routers.api-registry.rule=PathPrefix(`/admin/registry`)
# - traefik.http.routers.api-registry.rule=PathPrefix(`/admin/registry`)
- traefik.http.routers.api-registry.rule=Headers(`X-API-SERVICE`, `admin-registry`)
- traefik.http.routers.api-registry.tls=true
- traefik.http.routers.api-registry.tls.domains[0].main=egommerce.pbiernat.dev
- traefik.http.routers.api-registry.entryPoints=https
- traefik.http.routers.api-registry.service=api-registry
- traefik.http.routers.api-registry.middlewares=registry-stripprefix
- traefik.http.services.api-registry.loadbalancer.server.scheme=http
- traefik.http.services.api-registry.loadbalancer.server.port=8500
- traefik.http.middlewares.registry-stripprefix.stripprefix.prefixes=/admin/registry
- traefik.tls.certificates.certfile=/certs/client.cert
- traefik.tls.certificates.keyfile=/certs/client.key
volumes:
- ./certs/api-gateway:/certs
api-eventbus:
image: git.pbiernat.dev/egommerce/api-eventbus:dev
@@ -41,10 +53,18 @@ services:
labels:
- traefik.enable=true
- traefik.http.routers.api-eventbus.rule=PathPrefix(`/admin/eventbus`)
- traefik.http.routers.api-eventbus.tls=true
- traefik.http.routers.api-eventbus.tls.domains[0].main=egommerce.pbiernat.dev
- traefik.http.routers.api-eventbus.entryPoints=https
- traefik.http.routers.api-eventbus.service=api-eventbus
- traefik.http.routers.api-eventbus.middlewares=eventbus-stripprefix
- traefik.http.services.api-eventbus.loadbalancer.server.scheme=http
- traefik.http.services.api-eventbus.loadbalancer.server.port=15672
- traefik.http.middlewares.eventbus-stripprefix.stripprefix.prefixes=/admin/eventbus
- traefik.tls.certificates.certfile=/certs/client.cert
- traefik.tls.certificates.keyfile=/certs/client.key
volumes:
- ./certs/api-gateway:/certs
api-logger:
image: git.pbiernat.dev/egommerce/api-logger:dev
@@ -83,7 +103,7 @@ services:
- MONGODB_URL=mongodb://mongodb:12345678@mongodb.egommerce.pbiernat.dev:27017
- EVENTBUS_URL=amqp://guest:guest@eventbus.egommerce.pbiernat.dev:5672
volumes:
- ./certs/identity-svc:/certs
- ./certs/api-gateway:/certs
basket-svc:
image: git.pbiernat.dev/egommerce/basket-svc:dev
@@ -93,7 +113,7 @@ services:
- MONGODB_URL=mongodb://mongodb:12345678@mongodb.egommerce.pbiernat.dev:27017
- EVENTBUS_URL=amqp://guest:guest@eventbus.egommerce.pbiernat.dev:5672
volumes:
- ./certs/basket-svc:/certs
- ./certs/api-gateway:/certs
catalog-svc:
image: git.pbiernat.dev/egommerce/catalog-svc:dev
@@ -103,7 +123,7 @@ services:
- MONGODB_URL=mongodb://mongodb:12345678@mongodb.egommerce.pbiernat.dev:27017
- EVENTBUS_URL=amqp://guest:guest@eventbus.egommerce.pbiernat.dev:5672
volumes:
- ./certs/catalog-svc:/certs
- ./certs/api-gateway:/certs
order-svc:
image: git.pbiernat.dev/egommerce/order-svc:dev
@@ -113,7 +133,7 @@ services:
- MONGODB_URL=mongodb://mongodb:12345678@mongodb.egommerce.pbiernat.dev:27017
- EVENTBUS_URL=amqp://guest:guest@eventbus.egommerce.pbiernat.dev:5672
volumes:
- ./certs/order-svc:/certs
- ./certs/api-gateway:/certs
# Workers (EventBus)
basket-worker: