Christian Lempa 2 лет назад
Родитель
Сommit
96fcebe6ca
1 измененных файлов с 23 добавлено и 12 удалено
  1. 23 12
      docker-compose/teleport/docker-compose.yaml

+ 23 - 12
docker-compose/teleport/docker-compose.yaml

@@ -1,19 +1,30 @@
 ---
-volumes:
-  teleport-data:
+networks:
+  frontend:
+    external: true
 services:
   teleport:
-    image: quay.io/gravitational/teleport:10.0.2
-    user: 1000:1000
+    image: public.ecr.aws/gravitational/teleport-distroless:13
     container_name: teleport
-    entrypoint: /bin/sh
-    command: -c "/usr/bin/dumb-init teleport start -d -c /etc/teleport/teleport.yml"
     ports:
-      - 3023:3023
-      - 3024:3024
-      - 3025:3025
-      - 443:443
+      - "3080:3080"
+      - "3023:3023"
+      - "3024:3024"
+      - "3025:3025"
     volumes:
-      - .config:/etc/teleport
-      - teleport-data:/var/lib/teleport
+      - ./config:/etc/teleport
+      - ./data:/var/lib/teleport
+    labels: {}
+      # -- (Optional) Traefik example configuration
+      # traefik.enable: "true"
+      # traefik.http.services.teleport.loadbalancer.server.port: "3080"
+      # traefik.http.services.teleport.loadbalancer.server.scheme: "https"
+      # traefik.http.routers.teleport-http.entrypoints: "web"
+      # traefik.http.routers.teleport-http.rule: "Host(`your-server-url`)"
+      # traefik.http.routers.teleport-https.entrypoints: "websecure"
+      # traefik.http.routers.teleport-https.rule: "Host(`your-server-url`)"
+      # traefik.http.routers.teleport-https.tls: "true"
+      # traefik.http.routers.teleport-https.tls.certresolver: "your-certresolver"
+    networks:
+      - frontend
     restart: unless-stopped