herrfrutti , 11 months ago

Caddy would have the bridge proxy network and the port 443 exposed.

<pre style="background-color:#ffffff;">
<span style="color:#323232;">version: "3.7"
</span><span style="color:#323232;">
</span><span style="color:#323232;">networks:
</span><span style="color:#323232;">  proxy-network:
</span><span style="color:#323232;">    external: true
</span><span style="color:#323232;"># needs to be created manually bevor running (docker create network proxy-network)
</span><span style="color:#323232;">services:
</span><span style="color:#323232;">  caddy:
</span><span style="color:#323232;">    image: caddy
</span><span style="color:#323232;">    container_name: caddy
</span><span style="color:#323232;">    restart: unless-stopped
</span><span style="color:#323232;">    ports:
</span><span style="color:#323232;">      - 80:80
</span><span style="color:#323232;">      - 443:443
</span><span style="color:#323232;">    volumes:
</span><span style="color:#323232;">      - ./data:/data
</span><span style="color:#323232;">      - ./config:/config
</span><span style="color:#323232;">      - ./Caddyfile:/etc/caddy/Caddyfile:ro
</span><span style="color:#323232;">    networks:
</span><span style="color:#323232;">      - proxy-network
</span>

Other services:

<pre style="background-color:#ffffff;">
<span style="color:#323232;">version: "3.7"
</span><span style="color:#323232;">
</span><span style="color:#323232;">networks:
</span><span style="color:#323232;">  proxy-network:
</span><span style="color:#323232;">    external: true
</span><span style="color:#323232;">
</span><span style="color:#323232;">services:
</span><span style="color:#323232;">  app:
</span><span style="color:#323232;">    image: app
</span><span style="color:#323232;">    container_name: app
</span><span style="color:#323232;">    restart: unless-stopped
</span><span style="color:#323232;">    volumes:
</span><span style="color:#323232;">      - ./app-data:/data
</span><span style="color:#323232;">    networks:
</span><span style="color:#323232;">      - proxy-network
</span>

Caddy can now talk to the app with the apps container_name.

Caddyfile:

<pre style="background-color:#ffffff;">
<span style="color:#323232;">homepage.domain.de {
</span><span style="color:#323232;">    reverse_proxy app:80
</span><span style="color:#323232;">}
</span>

So the reverse proxy network is an extra network only for containers that need to be exposed.