checkmk/compose.yaml

@@ -4,7 +4,6 @@ services:
     container_name: "checkmk"
     environment:
       - CMK_PASSWORD=${CMK_PASSWORD:-password}
-      - TZ=${TZ:-Europe/Moscow}
       - CMK_SITE_ID=cmk
 
     volumes:
@@ -12,33 +11,39 @@ services:
     tmpfs:
       - /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
     ports:
-      - 5555:5000
+      - 5000:5000
       - 6776:8000
       - 6556:6556
     restart: always
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=traefik-proxy"
-
-      # Prod Router
-      - "traefik.http.routers.checkmk.rule=Host(`checkmk.forust.xyz`)"
-      - "traefik.http.routers.checkmk.entrypoints=websecure"
-      - "traefik.http.routers.checkmk.tls=true"
+      - "traefik.docker.network=proxy"
       - "traefik.http.services.checkmk.loadbalancer.server.port=5000"
 
+      # Prod Router
+      - "traefik.http.routers.checkmk.rule=Host(`cmk.forust.xyz`)"
+      - "traefik.http.routers.checkmk.entrypoints=websecure"
+      - "traefik.http.routers.checkmk.service=checkmk"
+      - "traefik.http.routers.checkmk.middlewares=security-headers@file"
+      - "traefik.http.routers.checkmk.tls=true"
+
       # Local Router
-      - "traefik.http.routers.checkmk-local.rule=Host(`checkmk.workstation.internal`) || Host(`checkmk.internal`)"
+      - "traefik.http.routers.checkmk-local.rule=Host(`cmk.workstation.internal`) || Host(`cmk.internal`)"
       - "traefik.http.routers.checkmk-local.entrypoints=websecure"
+      - "traefik.http.routers.checkmk-local.service=checkmk"
+      - "traefik.http.routers.checkmk-local.middlewares=security-headers@file"
       - "traefik.http.routers.checkmk-local.tls=true"
 
       # Dev Router
-      - "traefik.http.routers.checkmk-dev.rule=Host(`checkmk.gigaforust.internal`)"
+      - "traefik.http.routers.checkmk-dev.rule=Host(`cmk.gigaforust.internal`)"
+      - "traefik.http.routers.checkmk-dev.middlewares=security-headers@file"
+      - "traefik.http.routers.checkmk-dev.service=checkmk"
       - "traefik.http.routers.checkmk-dev.entrypoints=websecure"
       - "traefik.http.routers.checkmk-dev.tls=true"
 
     networks:
-      - traefik-proxy
+      - proxy
 
 networks:
-  traefik-proxy:
+  proxy:
     external: true