added secrets folder and removed ports in compose.yaml

This commit is contained in:
Chris Stuurman 2025-12-09 12:54:04 +02:00
parent 3485f0d61a
commit 07c5c00bde

View File

@ -32,11 +32,11 @@ services:
tmpfs:
size: 1000000000
- /certs:/certs
ports:
- 5000:5000 # (HTTP): Internal, unauthenticated access. Good for local access or Home Assistant integration, but should be blocked externally
- 8554:8554 # (RTSP): For streaming camera feeds, especially the Birdseye view
- 8555:8555/tcp # (WebRTC): For two-way audio and live streams, often used by mobile apps
- 8555:8555/udp # (WebRTC): For two-way audio and live streams, often used by mobile apps
#ports:
# - 5000:5000 # (HTTP): Internal, unauthenticated access. Good for local access or Home Assistant integration, but should be blocked externally
# - 8554:8554 # (RTSP): For streaming camera feeds, especially the Birdseye view
# - 8555:8555/tcp # (WebRTC): For two-way audio and live streams, often used by mobile apps
# - 8555:8555/udp # (WebRTC): For two-way audio and live streams, often used by mobile apps
# - 8971:8971 # (HTTPS/WS): Main authenticated access for UI and API. Use with reverse proxies for TLS/SSL
env_file: .frigate.env
secrets:
@ -46,7 +46,7 @@ services:
labels:
- traefik.enable=true
- traefik.docker.network=traefik-net
- traefik.http.services.${APPLICATION_NAME}-svc.loadbalancer.server.port=${WEBUI_PORT}
- traefik.http.services.${APPLICATION_NAME}-svc.loadbalancer.server.port=${INTERNAL_PORT}
- traefik.http.routers.${APPLICATION_NAME}-rtr.entrypoints=web
- traefik.http.routers.${APPLICATION_NAME}-rtr.rule=Host(`${WEBAPP_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`) || Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)
- traefik.http.routers.${APPLICATION_NAME}-rtr.middlewares=http-mw-secureHeaders-redirect@file