- traefik.yml/dynamic/* copied from /etc/dokploy/traefik (acme.json gitignored — stays on host) - compose.yaml: same image/binds/ports as dokploy-traefik, joins dokploy-network + komodo - dynamic/komodo.yml: komodo.paginica.com router (inactive until cutover)
37 lines
1.3 KiB
YAML
37 lines
1.3 KiB
YAML
# Router del panel Komodo — REEMPLAZA a dokploy.yml en el cutover del
|
|
# panel (backlog/01 Fase C). No activar mientras dokploy.yml exista con
|
|
# el mismo Host (colisión de routers).
|
|
#
|
|
# komodo.paginica.com = dominio temporal del panel.
|
|
# panel.paginica.com se reasigna al retirar Dokploy (mismo Host menos
|
|
# churn): descomentar el segundo Host en ambas reglas entonces.
|
|
#
|
|
# Requiere: traefik adjunto a la red externa `komodo` (compose.yaml) —
|
|
# core:9120 se resuelve por DNS del compose project `komodo`.
|
|
http:
|
|
routers:
|
|
komodo-web:
|
|
rule: Host(`komodo.paginica.com`) && PathPrefix(`/`)
|
|
service: komodo-core
|
|
entryPoints:
|
|
- web
|
|
middlewares:
|
|
- redirect-to-https
|
|
komodo-websecure:
|
|
rule: Host(`komodo.paginica.com`) && PathPrefix(`/`)
|
|
service: komodo-core
|
|
entryPoints:
|
|
- websecure
|
|
# ak-fw NO se aplica: el panel usa OIDC nativo + local-auth de
|
|
# rescate (blueprint 22-komodo-oidc). Gatillar el panel del
|
|
# orquestador con ForwardAuth crearía una dependencia circular
|
|
# si authentik se migra en el stack 6 — se evalúa de nuevo entonces.
|
|
tls:
|
|
certResolver: letsencrypt
|
|
services:
|
|
komodo-core:
|
|
loadBalancer:
|
|
servers:
|
|
- url: http://core:9120
|
|
passHostHeader: true
|