Add caddy as reverse procy

Author: jonra1993

Diff for: CHANGELOG.md

@@ -1,5 +1,12 @@
 # Project Changelog
 
+
+## v0.1.17 (2023-04-01)
+
+#### 💅 Polish
+
+- `Migrate from traefik to Caddy as reverse proxy server`
+
 ## v0.1.16 (2023-03-25)
 
 #### 💅 Polish

Diff for: README.md

@@ -79,7 +79,7 @@ This starts pgamin in [http://localhost:15432](http://localhost:15432).
   <img src="static/container_architecture.png" align="center"/>
 </p>
 
-As this project uses [traefik](https://doc.traefik.io/traefik/routing/routers/) as a reverse proxy, which uses namespaces routing, you can access the documentation with the following path [http://fastapi.localhost/docs](http://fastapi.localhost/docs)
+As this project uses [Caddy](https://caddyserver.com/) as a reverse proxy, which uses namespaces routing, you can access the documentation with the following path [http://fastapi.localhost/docs](http://fastapi.localhost/docs)
 
 ## Preview
 
@@ -90,18 +90,8 @@ As this project uses [traefik](https://doc.traefik.io/traefik/routing/routers/)
   <img src="static/2.png" align="center"/>
 </p>
 
-## Traefik Dashboard
-Traefik has been configurated as a reverse proxy on the ingress of the project; you can access Traefik Dashboard using the following link [http://traefik.localhost/](http://traefik.localhost/). You should use **username: test** and **pass: test**. If you want to change the password, you can find more information on how to do it [here](https://doc.traefik.io/traefik/operations/api/)
-
-<p align="center">
-  <img src="static/traefik1.png" align="center"/>
-</p>
-<p align="center">
-  <img src="static/traefik2.png" align="center"/>
-</p>
-
 ## Static files
-All files on static folder will be served by nginx container as static files. You can check it with this link [http://nginx.localhost/1.png](http://nginx.localhost/1.png)
+All files on static folder will be served by Caddy container as static files. You can check it with this link [http://static.localhost](http://static.localhost)
 
 ## Minio server
 This template allows users can upload their photos. The images are stored using the open source Object Storage Service (OSS) [minio](https://min.io/), which provides storage of images using buckets in a secure way through presigned URLs.
@@ -265,8 +255,7 @@ When the build is successful, you can see the SonarQube screen automatically ref
 - [x] Add JWT authentication
 - [x] Add Pagination
 - [x] Add User birthday field with timezone
-- [x] Add reverse proxy (traefik) with docker compose
-- [x] Add static server with nginx
+- [x] Add static server
 - [x] Add basic RBAC (Role base access control)
 - [x] Add sample heroes, teams and groups on init db
 - [x] Add cache configuration using fastapi-cache2 and redis
@@ -290,7 +279,7 @@ When the build is successful, you can see the SonarQube screen automatically ref
 - [x] Upgrade typing (Compatible just with python > 3.10)
 - [x] Add sample transformers NLP models and use them globally
 - [x] Add Celery samples for tasks, and schedule tasks
-- [ ] Migrate from traefik reverse proxy to Caddy reverse proxy for automatic ssl
+- [x] Migrate from traefik reverse proxy to Caddy reverse proxy for automatic ssl
 - [ ] Add a nextjs sample frontend
 - [ ] Add testing
 - [ ] Add jsonb field on table sample

Diff for: caddy/Caddyfile

@@ -0,0 +1,38 @@
+{
+  email [email protected]
+}
+
+fastapi.{$EXT_ENDPOINT1}:80, fastapi.{$LOCAL_1}:80, fastapi.{$LOCAL_2}:80, :80 {
+  reverse_proxy fastapi_server:8000
+}
+
+storage.{$EXT_ENDPOINT1}:80, storage.{$LOCAL_1}:80, storage.{$LOCAL_2}:80 {
+  reverse_proxy minio_server:9000 
+}
+
+stash.{$EXT_ENDPOINT1}:80, stash.{$LOCAL_1}:80, stash.{$LOCAL_2}:80 {
+  reverse_proxy minio_server:9090 
+}
+
+static.{$EXT_ENDPOINT1}:80, static.{$LOCAL_1}:80, static.{$LOCAL_2}:80 {
+  root * /code/static
+  file_server browse
+}
+
+## Uncomment this to automatic ssl
+# fastapi.{$EXT_ENDPOINT1}, fastapi.{$LOCAL_1}, fastapi.{$LOCAL_2} {
+#   reverse_proxy fastapi_server:8000
+# }
+
+# storage.{$EXT_ENDPOINT1}, storage.{$LOCAL_1}, storage.{$LOCAL_2} {
+#   reverse_proxy minio_server:9000 
+# }
+
+# stash.{$EXT_ENDPOINT1}, stash.{$LOCAL_1}, stash.{$LOCAL_2} {
+#   reverse_proxy minio_server:9090 
+# }
+
+# static.{$EXT_ENDPOINT1}, static.{$LOCAL_1}, static.{$LOCAL_2} {
+#   root * /code/static
+#   file_server browse
+# }

Diff for: docker-compose-dev.yml

@@ -15,14 +15,7 @@ services:
     depends_on:
       - database
     links:
-      - traefik-proxy:storage.localhost
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.fastapi_local.entrypoints=web"
-      - "traefik.http.routers.fastapi_local.rule=Host(`fastapi.${LOCAL_1}`, `fastapi.${LOCAL_2}`, `fastapi.${EXT_ENDPOINT1}`)"
-      - "traefik.http.routers.fastapi_local_base.entrypoints=web"
-      - "traefik.http.routers.fastapi_local_base.rule=Host(`${LOCAL_1}`, `${LOCAL_2}`, `${EXT_ENDPOINT1}`)"
-      - traefik.http.services.fastapi_localservice.loadbalancer.server.port=8000
+      - caddy_reverse_proxy:storage.localhost
 
   database:
     image: bitnami/postgresql:13.3.0
@@ -84,26 +77,6 @@ services:
       - database
       - redis_server
     env_file: .env
-  
-
-  nginx_server:
-    container_name: nginx_server
-    restart: unless-stopped
-    logging:
-      driver: none
-    image: "nginx:alpine"
-    expose:
-      - 8080
-    volumes:
-      - ./static:/code/static
-      - ./nginx-config-files/nginx.conf:/etc/nginx/nginx.conf
-      - ./nginx-config-files/app.nginx.template:/etc/nginx/templates/app.nginx.template
-      - "${EB_LOG_BASE_DIR:-./nginx-config-files}/nginx-proxy:/var/log/nginx"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.nginx_local.entrypoints=web"
-      - "traefik.http.routers.nginx_local.rule=Host(`nginx.${LOCAL_1}`, `nginx.${LOCAL_2}`, `nginx.${EXT_ENDPOINT1}`)"
-      - traefik.http.services.nginx_local_service.loadbalancer.server.port=8080
 
   minio_server:
     image: minio/minio:latest
@@ -119,33 +92,25 @@ services:
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
       MINIO_BROWSER_REDIRECT_URL: http://stash.localhost
     command: "server /data --console-address ':9090'"    
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.minio.entrypoints=web
-      - traefik.http.routers.minio.service=minio
-      - traefik.http.routers.minio.rule=Host(`storage.${LOCAL_1}`, `storage.${LOCAL_2}`, `storage.${EXT_ENDPOINT1}`)      
-      - traefik.http.services.minio.loadbalancer.server.port=9000
-      - traefik.http.routers.minio-console.entrypoints=web
-      - traefik.http.routers.minio-console.service=minio-console
-      - traefik.http.routers.minio-console.rule=Host(`stash.${LOCAL_1}`, `stash.${LOCAL_2}`, `stash.${EXT_ENDPOINT1}`)      
-      - traefik.http.services.minio-console.loadbalancer.server.port=9090
 
-  traefik-proxy:
-    container_name: traefik-proxy
+  caddy_reverse_proxy:
+    container_name: caddy_reverse_proxy
+    image: caddy:alpine
     restart: always
-    image: "traefik:latest"
-    command:
-      - "--providers.docker=true"
     ports:
-      - "80:80"
+      - 80:80
+      - 8080:8080
+      - 443:443
+    environment:
+      - EXT_ENDPOINT1=${EXT_ENDPOINT1}
+      - LOCAL_1=${LOCAL_1}
+      - LOCAL_2=${LOCAL_2}
     volumes:
-      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-      - ./traefik/traefik.yml:/traefik.yml:ro
-      - ./traefik/.htpasswd:/.htpasswd
-      - "${EB_LOG_BASE_DIR:-./traefik}/traefik-proxy:/logs"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.dashboard.rule=Host(`traefik.${LOCAL_1}`, `traefik.${LOCAL_2}`, `traefik.${EXT_ENDPOINT1}`)"
-      - "traefik.http.routers.dashboard.service=api@internal"
-      - "traefik.http.routers.dashboard.middlewares=auth"
-      - "traefik.http.middlewares.auth.basicauth.usersfile=/.htpasswd"
+      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
+      - ./static:/code/static
+      - caddy_data:/data
+      - caddy_config:/config
+
+volumes:
+  caddy_data:
+  caddy_config:

Diff for: docker-compose.yml

@@ -14,14 +14,7 @@ services:
     depends_on:
       - database
     links:
-      - traefik-proxy:storage.localhost
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.fastapi_local.entrypoints=web"
-      - "traefik.http.routers.fastapi_local.rule=Host(`fastapi.${LOCAL_1}`, `fastapi.${LOCAL_2}`, `fastapi.${EXT_ENDPOINT1}`)"
-      - "traefik.http.routers.fastapi_local_base.entrypoints=web"
-      - "traefik.http.routers.fastapi_local_base.rule=Host(`${LOCAL_1}`, `${LOCAL_2}`, `${EXT_ENDPOINT1}`)"
-      - traefik.http.services.fastapi_localservice.loadbalancer.server.port=8000
+      - caddy_reverse_proxy:storage.localhost
 
   database:
     image: bitnami/postgresql:13.3.0
@@ -87,25 +80,6 @@ services:
     env_file: .env
 
 
-  nginx_server:
-    container_name: nginx_server
-    restart: unless-stopped
-    logging:
-      driver: none
-    image: "nginx:alpine"
-    expose:
-      - 8080
-    volumes:
-      - ./static:/code/static
-      - ./nginx-config-files/nginx.conf:/etc/nginx/nginx.conf
-      - ./nginx-config-files/app.nginx.template:/etc/nginx/templates/app.nginx.template
-      - "${EB_LOG_BASE_DIR:-./nginx-config-files}/nginx-proxy:/var/log/nginx"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.nginx_local.entrypoints=web"
-      - "traefik.http.routers.nginx_local.rule=Host(`nginx.${LOCAL_1}`, `nginx.${LOCAL_2}`, `nginx.${EXT_ENDPOINT1}`)"
-      - traefik.http.services.nginx_local_service.loadbalancer.server.port=8080
-
   minio_server:
     image: minio/minio:latest
     restart: always
@@ -119,34 +93,26 @@ services:
       MINIO_ROOT_USER: ${MINIO_ROOT_USER}
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
       MINIO_BROWSER_REDIRECT_URL: http://stash.localhost
-    command: "server /data --console-address ':9090'"    
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.minio.entrypoints=web
-      - traefik.http.routers.minio.service=minio
-      - traefik.http.routers.minio.rule=Host(`storage.${LOCAL_1}`, `storage.${LOCAL_2}`, `storage.${EXT_ENDPOINT1}`)      
-      - traefik.http.services.minio.loadbalancer.server.port=9000
-      - traefik.http.routers.minio-console.entrypoints=web
-      - traefik.http.routers.minio-console.service=minio-console
-      - traefik.http.routers.minio-console.rule=Host(`stash.${LOCAL_1}`, `stash.${LOCAL_2}`, `stash.${EXT_ENDPOINT1}`)      
-      - traefik.http.services.minio-console.loadbalancer.server.port=9090
+    command: "server /data --console-address ':9090'"  
 
-  traefik-proxy:
-    container_name: traefik-proxy
+  caddy_reverse_proxy:
+    container_name: caddy_reverse_proxy
+    image: caddy:alpine
     restart: always
-    image: "traefik:latest"
-    command:
-      - "--providers.docker=true"
     ports:
-      - "80:80"
+      - 80:80
+      - 8080:8080
+      - 443:443
+    environment:
+      - EXT_ENDPOINT1=${EXT_ENDPOINT1}
+      - LOCAL_1=${LOCAL_1}
+      - LOCAL_2=${LOCAL_2}
     volumes:
-      - "/var/run/docker.sock:/var/run/docker.sock:ro"
-      - ./traefik/traefik.yml:/traefik.yml:ro
-      - ./traefik/.htpasswd:/.htpasswd
-      - "${EB_LOG_BASE_DIR:-./traefik}/traefik-proxy:/logs"
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.dashboard.rule=Host(`traefik.${LOCAL_1}`, `traefik.${LOCAL_2}`, `traefik.${EXT_ENDPOINT1}`)"
-      - "traefik.http.routers.dashboard.service=api@internal"
-      - "traefik.http.routers.dashboard.middlewares=auth"
-      - "traefik.http.middlewares.auth.basicauth.usersfile=/.htpasswd"
+      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
+      - ./static:/code/static
+      - caddy_data:/data
+      - caddy_config:/config
+
+volumes:
+  caddy_data:
+  caddy_config: