squid/docker-compose.yml

68 lines
1.9 KiB
YAML
Raw Permalink Normal View History

2020-07-30 14:32:27 +00:00
version: "3.7"
services:
2020-08-07 12:52:04 +00:00
squid-4:
2020-07-30 14:32:27 +00:00
deploy:
placement:
constraints: [node.labels.com.sigyl.git-stack == yes]
replicas: 1
restart_policy:
condition: any
2020-08-12 10:53:17 +00:00
image: sigyl/squid-4:1.1.0
2020-08-06 10:34:15 +00:00
environment:
2020-08-06 10:50:03 +00:00
- MITM_PROXY=yes
- HTTP_PORT=3128
2020-08-06 14:41:10 +00:00
- MITM_CERT=/run/secrets/ca.crt
- MITM_KEY=/run/secrets/ca.key
2020-08-06 10:50:03 +00:00
- VISIBLE_HOSTNAME=git.local-domain
2020-08-06 21:16:29 +00:00
- >
EXTRA_CONFIG1=tls_outgoing_options
capath=/etc/ssl/certs
options=NO_SSLv3,NO_TLSv1 min-version=1.2
2020-08-07 12:52:04 +00:00
# - EXTRA_CONFIG2=sslproxy_cipher ECDHE+ECDSA+AESGCM:ECDHE+RSA+AESGCM:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM #:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS
2020-08-06 21:16:29 +00:00
# these are basically to make everything canched
2020-08-07 13:20:13 +00:00
- 'EXTRA_CONFIG2=refresh_pattern ^http: 999999999 1000000000% 999999999 override-expire'
- 'EXTRA_CONFIG3=refresh_pattern ^https: 999999999 1000000000% 999999999 override-expire'
2020-08-07 13:35:53 +00:00
- EXTRA_CONFIG4= acl no_cache_domains dstdomain auth.docker.io
2020-08-07 13:33:28 +00:00
- EXTRA_CONFIG5=cache deny no_cache_domains
2020-08-07 12:52:04 +00:00
volumes:
- squid-4-cache:/var/cache/squid4
2020-07-30 14:32:27 +00:00
ports:
2020-08-03 11:28:17 +00:00
- 3128:3128
2020-07-30 14:32:27 +00:00
networks:
- appnet
- externalnet
2020-08-06 14:41:10 +00:00
secrets:
- ca.crt
- ca.key
2020-08-03 12:49:03 +00:00
squid-deb:
deploy:
placement:
constraints: [node.labels.com.sigyl.git-stack == yes]
replicas: 1
restart_policy:
condition: any
2020-08-12 10:11:53 +00:00
image: sigyl/squid-deb-proxy:1.0.0
2020-08-03 12:49:03 +00:00
volumes:
- squid-deb-cache:/cachedir
ports:
- 8000:8000
networks:
- appnet
- externalnet
2020-07-30 14:32:27 +00:00
volumes:
2020-08-07 12:52:04 +00:00
squid-4-cache:
2020-08-03 12:49:03 +00:00
squid-deb-cache:
2020-07-30 14:32:27 +00:00
networks:
appnet:
driver: overlay
externalnet:
driver: overlay
2020-08-03 12:49:03 +00:00
external: true
2020-08-06 14:34:23 +00:00
secrets:
2020-08-06 14:41:10 +00:00
'ca.crt':
2020-08-06 14:36:35 +00:00
file: .secrets/ca.crt
2020-08-06 14:41:10 +00:00
'ca.key':
2020-08-06 14:34:23 +00:00
file: .secrets/ca.key