Automatically deploy with https

docker-compose.yml

@@ -1,20 +1,6 @@
 version: "3.5"
 
 services:
-
-  nginx:
-    container_name: surface-nginx
-    build: ./nginx
-    volumes:
-      - ./api/static:/home/app/web/staticfiles
-      - ./data:/home/app/web/data
-    env_file:
-      - api/production.env
-    ports:
-      - 8080:80
-    depends_on:
-      - api
-
   cache:
     container_name: surface-cache
     image: memcached
@@ -43,6 +29,8 @@ services:
       options:
         max-size: "1M"
         max-file: "10"
+    networks:
+      - opencdms-surface
 
   api:
     build:
@@ -69,6 +57,15 @@ services:
       options:
         max-size: "1M"
         max-file: "10"
+    networks:
+      - opencdms-surface
+    expose:
+      - 8000
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.django.rule=Host(`$HOST_FQDN`)"
+      - "traefik.http.routers.django.tls=true"
+      - "traefik.http.routers.django.tls.certresolver=letsencrypt"
 
   celery_worker:
     build:
@@ -93,6 +90,8 @@ services:
       options:
         max-size: "1M"
         max-file: "10"
+    networks:
+      - opencdms-surface
 
   celery_beat:
     build:
@@ -114,3 +113,19 @@ services:
       options:
         max-size: "1M"
         max-file: "10"
+    networks:
+      - opencdms-surface
+
+  traefik:
+    image: traefik:latest
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock:ro"
+      - "$PWD/traefik/traefik.toml:/etc/traefik/traefik.toml"
+    networks:
+      - opencdms-surface
+
+networks:
+  opencdms-surface:

traefik/traefik.toml

@@ -0,0 +1,23 @@
+[entryPoints]
+  [entryPoints.web]
+    address = ":80"
+  [entryPoints.web.http]
+    [entryPoints.web.http.redirections]
+      [entryPoints.web.http.redirections.entryPoint]
+        to = "websecure"
+        scheme = "https"
+
+  [entryPoints.websecure]
+    address = ":443"
+
+[accessLog]
+
+[providers]
+  [providers.docker]
+    exposedByDefault = false
+
+[certificatesResolvers.letsencrypt.acme]
+  email = "[email protected]"
+  storage= "acme.json"
+  [certificatesResolvers.letsencrypt.acme.httpChallenge]
+    entryPoint = "web"