我试图通过 docker-compose
使用traefik作为反向代理来运行鬼影 .
我有两个域, sub.foo.com
和 bar.com
. 调用 docker-compose up -d
后,可通过 sub.foo.com:2386
访问容器,但不能访问 bar.com
. 我知道没有必要在 ghost.service
中使用 ports
选项,但要在那里证明容器出现了 .
这是我的配置:
traefik.toml
debug = false
logLevel = "ERROR"
defaultEntryPoints = ["https","http"]
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.http.redirect]
entryPoint = "https"
[entryPoints.https]
address = ":443"
[entryPoints.https.tls]
[retry]
[docker]
endpoint = "unix:///var/run/docker.sock"
domain = "sub.foo.com"
watch = true
exposedbydefault = false
[acme]
email = "john.doe@example.com"
storage = "acme.json"
entryPoint = "https"
onHostRule = true
[acme.httpChallenge]
entryPoint = "http"
docker-compose.yml
version: "3.3"
services:
db:
image: mysql:5.7
volumes:
- db_data:/var/lib/mysql
restart: always
networks:
- ghost
environment:
MYSQL_ROOT_PASSWORD: testing
MYSQL_DATABASE: ghost
MYSQL_USER: ghost
MYSQL_PASSWORD: ghost
ghost:
depends_on:
- db
image: ghost:2.1.2-alpine
ports:
- "2368:2368"
networks:
- traefik
- ghost
volumes:
- ghost_data:/var/lib/ghost/content
environment:
database__client: mysql
database__connection__host: db
database__connection__user: ghost
database__connection__password: ghost
database__connection__database: ghost
labels:
- "traefik.backend=ghost"
- "traefik.docker.network=traefik"
- "traefik.enable=true"
- "traefik.frontend.rule=Host:bar.com"
- "traefik.port=2368"
- "traefik.protocol=http"
volumes:
db_data: {}
ghost_data: {}
networks:
ghost: {}
traefik:
external: true
我有什么想法我做错了吗?我的DNS记录在 sub.foo.com
和 bar.com
上的指向相同 . 当我导航到 bar.com
时,我最终得到:
<!DOCTYPE html>
<html><head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
<title>Access Denied</title>
<style type="text/css">body {margin:0;font-family:verdana,sans-serif;} h1 {margin:0;padding:12px 25px;background-color:#343434;color:#ddd} p {margin:12px 25px;} strong {color:#E0042D;}</style>
</head>
<body>
<h1>Access Denied</h1>
<p>
<strong>You are attempting to access a forbidden site.</strong>
Consult your system administrator for details.
</p>
</body>
</html>
这不是你的标准traefik错误 . 是不是有约束力?
1 回答
也许它被切断但你的toml还需要以下内容:
您的docker-compose可能缺少以下内容:
然而,错误看起来像是treafik相关的不同之处 . treafik是否暴露在服务器上的端口80和443上?