컨테이너 도메인 라우팅용.

처음 설정.

services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    restart: unless-stopped
    command:
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--providers.docker.network=proxy"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
      - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"

WAF 붙이면서 변경.

services:
  traefik:
    image: traefik:v2.11
    container_name: traefik
    restart: unless-stopped
    command:
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--providers.docker.network=proxy"
      - "--entrypoints.web.address=:8080"
      - "--entrypoints.web.forwardedHeaders.trustedIPs=172.16.0.0/12,10.0.0.0/8"
      - "--ping=true"
      - "--ping.entrypoint=web"
    expose:
      - "8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - proxy

GitLab CI 배포.

deploy:
  stage: deploy
  script:
    - cd $PROJECT_HOME/$CI_PROJECT_NAME
    - git pull
    - docker compose -f $COMPOSE_FILE pull
    - docker compose -f $COMPOSE_FILE up -d
    - $DEPLOY_SCRIPTS/healthcheck.sh $PROJECT_HOME/$CI_PROJECT_NAME $COMPOSE_FILE