fix : traefik 설정 및 portainer agent 추가

Author: lsh1215

docker-compose.backend.yml

@@ -37,10 +37,6 @@ services:
       exec gunicorn backend.wsgi:application --bind 0.0.0.0:8000 --workers=4 --threads=2"
     depends_on:
       - mysqldb
-#    labels:
-#      - "traefik.enable=true"
-#      - "traefik.http.routers.backend.rule=Host(`api.localhost`)"
-#      - "traefik.http.services.backend.loadbalancer.server.port=8000"
     networks:
       - app-network
 

docker-compose.portainer.yml

@@ -24,6 +24,20 @@ services:
       - "traefik.http.services.portainer.loadbalancer.server.port=9000"
       - "traefik.http.routers.portainer.middlewares=auth@file"
 
+  agent:
+    image: portainer/agent:latest
+    container_name: portainer_agent
+    environment:
+      - AGENT_CLUSTER_ADDR=tasks.agent
+      - DOCKER_HOST=unix:///var/run/docker.sock
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/lib/docker/volumes:/var/lib/docker/volumes
+    networks:
+      - web
+      - app-network
+    restart: always
+
 volumes:
   portainer_data:
 

docker-compose.traefik.yml

@@ -21,7 +21,6 @@ services:
     labels:
       # 보안 대시보드 라우터 설정 (traefik.yourdomain.com 교체 필요)
       - "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.autonotify.store`)"
-      - "traefik.http.routers.traefik-dashboard.entrypoints=dashboard"
       - "traefik.http.routers.traefik-dashboard.entrypoints=websecure"
       - "traefik.http.routers.traefik-dashboard.service=api@internal"
       - "traefik.http.routers.traefik-dashboard.tls.certresolver=letsencrypt"

traefik/traefik.yml

@@ -1,37 +1,51 @@
 entryPoints:
   web:
     address: ":80"
-    http:
-      redirections:
-        entryPoint:
-          to: websecure
-          scheme: https
+
   websecure:
     address: ":443"
+
   dashboard:
     address: ":8088"
 
 api:
   dashboard: true
-  insecure: false # true로 변경하면 대시보드 접근 시 인증 불필요 (테스트 용도)
+  insecure: false
 
 log:
-  level: INFO # DEBUG 로 변경하면 더 상세한 로그 확인 가능
+  level: INFO
 
 accessLog: {}
 
 providers:
   docker:
     exposedByDefault: false
     network: web
+
   file:
-    filename: "/etc/traefik/dynamic_conf.yml" # 컨테이너 내부 경로. 실제 마운트 경로 확인 필요
-    # watch: true # 필요 시 파일 변경 감지 활성화
+    filename: "/etc/traefik/dynamic_conf.yml"
 
 certificatesResolvers:
   letsencrypt:
     acme:
-      email: sanghun@gmail.com # 실제 사용하는 이메일 주소 권장
-      storage: /etc/traefik/acme.json # acme 인증서 저장 경로 (볼륨 마운트 필수)
+      email: sanghun@gmail.com
+      storage: /etc/traefik/acme.json
       httpChallenge:
-        entryPoint: web # HTTP 챌린지는 'web'(80) 엔트리포인트 사용
+        entryPoint: web
+
+http:
+  middlewares:
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+        permanent: true
+
+  routers:
+    redirect-all:
+      rule: "PathPrefix(`/`)"
+      entryPoints:
+        - web
+      middlewares:
+        - redirect-to-https
+      service: noop@internal
+      priority: 1