Impl note: server-pw can be ignored for a password-less server, e.g. if operator wants to run a publicly registered server: https://www.mumble.info/documentation/administration/config-file/#server-registration Impl note: secret names (-pw rather than -password) are shortened due to R015.
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
---
|
|
version: "3.8"
|
|
|
|
services:
|
|
app:
|
|
image: mumblevoip/mumble-server:v1.6.870-0
|
|
networks:
|
|
- proxy
|
|
volumes:
|
|
- "mumble_data:/data"
|
|
secrets:
|
|
- source: superuser-pw
|
|
target: MUMBLE_SUPERUSER_PASSWORD
|
|
deploy:
|
|
restart_policy:
|
|
condition: on-failure
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.tcp.routers.${STACK_NAME}.entrypoints=mumble"
|
|
- "traefik.tcp.routers.${STACK_NAME}.service=${STACK_NAME}-tcp-service"
|
|
- "traefik.tcp.routers.${STACK_NAME}.rule=HostSNI(`*`)"
|
|
- "traefik.tcp.routers.${STACK_NAME}.tls.passthrough=true"
|
|
- "traefik.tcp.services.${STACK_NAME}-tcp-service.loadbalancer.server.port=64738"
|
|
- "traefik.udp.routers.${STACK_NAME}.entrypoints=mumble-udp"
|
|
- "traefik.udp.routers.${STACK_NAME}.service=${STACK_NAME}-udp-service"
|
|
- "traefik.udp.services.${STACK_NAME}-udp-service.loadbalancer.server.port=64738"
|
|
- "coop-cloud.${STACK_NAME}.version=0.1.0+v1.6.870-0"
|
|
|
|
secrets:
|
|
superuser-pw:
|
|
external: true
|
|
name: ${STACK_NAME}_superuser-pw_${SECRET_SUPERUSER_PASSWORD_VERSION}
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|
|
|
|
volumes:
|
|
mumble_data:
|