Do not expose containers by default in traefik

support/docker/production/config/traefik.toml

@@ -61,4 +61,7 @@ entryPoint = "https"
   #
   # Required
   #
-  entryPoint = "http"
+  entryPoint = "http"
+
+[docker]
+  exposedByDefault = false

support/docker/production/docker-compose.yml

@@ -68,26 +68,20 @@ services:
       - redis
       - postfix
     restart: "always"
-    labels:
-      traefik.enable: "false"
 
   postgres:
-    image: postgres:10-alpine
+    image: postgres:12-alpine
     env_file:
       - .env
     volumes:
       - ./docker-volume/db:/var/lib/postgresql/data
     restart: "always"
-    labels:
-      traefik.enable: "false"
 
   redis:
     image: redis:5-alpine
     volumes:
       - ./docker-volume/redis:/data
     restart: "always"
-    labels:
-      traefik.enable: "false"
 
   postfix:
     image: mwader/postfix-relay
@@ -95,8 +89,6 @@ services:
       - .env
     volumes:
       - ./docker-volume/opendkim/keys:/etc/opendkim/keys
-    labels:
-      traefik.enable: "false"
     restart: "always"
 
 networks:

support/docker/production/entrypoint.nginx.sh

@@ -12,6 +12,4 @@ envsubst '${WEBSERVER_HOST} ${PEERTUBE_HOST}' < $SOURCE > $TARGET
 # Remove HTTPS/SSL from nginx conf
 sed -i 's/443 ssl http2/80/g;/ssl_/d' $TARGET
 
-cat $TARGET
-
 nginx -g "daemon off;"