Traefik

      ---
      version: "3.3"

      networks:
        zabra:
          external: true

      services:
        db:
          image: mariadb:10.5.11
          container_name: mariadb
          restart: always
          networks:
            - zabra
          command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
          volumes:
            - /opt/data/mariadb:/var/lib/mysql
          environment:
            - MYSQL_ROOT_PASSWORD="${MYSQL_ROOT_PASSWORD}"
            - MYSQL_PASSWORD="${MYSQL_PASSWORD}"
            - MYSQL_DATABASE=nextcloud
            - MYSQL_USER=nextcloud

        nextcloud:
          image: nextcloud:22.2.7
          container_name: cloud
          hostname: nextcloud.example.com
          restart: always
          networks:
            - zabra
          links:
            - db
          volumes:
            - /opt/data/nextcloud/html:/var/www/html
            - /opt/data/nextcloud/data:/opt/data:rw
          environment:
            - NEXTCLOUD_DATA_DIR=/opt/data #security rec: dont use a default /var/www
            - NEXTCLOUD_TRUSTED_DOMAINS="nextcloud.example.com localhost"
            - TRUSTED_PROXIES=traefik
            - OVERWRITEPROTOCOL=https
            - MYSQL_PASSWORD="${MYSQL_PASSWORD}"
            - MYSQL_DATABASE=nextcloud
            - MYSQL_USER=nextcloud
            - MYSQL_HOST=db
          labels:
            # Enable proxy through traefik and https
            - "traefik.enable=true"
            - "traefik.http.routers.nextcloud.rule=Host(`netxcloud.example.com`)"
            - "traefik.http.routers.nextcloud.entrypoints=websecure"
            - "traefik.http.routers.nextcloud.tls=true"
            - "traefik.http.routers.nextcloud.tls.certresolver=letsencrypt"
            - "traefik.http.services.nextcloud.loadbalancer.server.port=80"
            # Additionall security options
            - "traefik.http.middlewares.nextcloudredir.redirectregex.permanent=true"
            - "traefik.http.middlewares.nextcloudredir.redirectregex.regex=https://(.*)/.well-known/(card|cal)dav"
            - "traefik.http.middlewares.nextcloudredir.redirectregex.replacement=https://$$1/remote.php/dav/"
            - "traefik.http.middlewares.nextcloudsts.headers.stsincludesubdomains=false"
            - "traefik.http.middlewares.nextcloudsts.headers.stspreload=true"
            - "traefik.http.middlewares.nextcloudsts.headers.stsseconds=31536000"
            - "traefik.http.middlewares.nextcloudsts.headers.isdevelopment=false"
            - "traefik.http.routers.nextcloud.middlewares=nextcloudredir,nextcloudsts"

    ---
    version: "3.3"

    networks:
      zabra:
        external: true

    services:
      gitlab:
        image: "gitlab/gitlab-ce:15.3.0-ce.0"
        container_name: gitlab
        hostname: "gitlab.enoks.fr"
        restart: always
        networks:
          - zabra
        environment:
          GITLAB_OMNIBUS_CONFIG: |
            external_url "https://gitlab.enoks.fr"
            # Disable some services
            registry['enable'] = false
            prometheus_monitoring['enable'] = false
            grafana['enable'] = false
            # Set ssh external port
            #gitlab_rails['gitlab_shell_ssh_port'] = 2221
            # Adapt nginx conf because we have traefik above
            letsencrypt['enable'] = false # ssl is managed by traefik
            nginx['listen_port'] = 80
            nginx['listen_https'] = false
            nginx['proxy_set_headers'] = {
              "X-Forwarded-Proto" => "https",
              "X-Forwarded-Ssl" => "on"
            }
        labels:
          # Enable proxy through traefik and https
          - "traefik.enable=true"
          - "traefik.http.routers.gitlab.rule=Host(`gitlab.enoks.fr`)"
          - "traefik.http.routers.gitlab.entrypoints=websecure"
          - "traefik.http.routers.gitlab.tls=true"
          - "traefik.http.routers.gitlab.tls.certresolver=letsencrypt"
          # Tell Traefik to use the port 80 to connect to container/service: gitlab
          # because image has more than one exposed port. trafefik take the first by default
          - "traefik.http.services.gitlab.loadbalancer.server.port=80"
        ports:
        - "2221:22"
        volumes:
          # GITLAB_HOME is defined in .env file:
          - "$GITLAB_HOME/config:/etc/gitlab"
          - "$GITLAB_HOME/logs:/var/log/gitlab"
          - "$GITLAB_HOME/data:/var/opt/gitlab"

      #/bin/bash

      #to add in crontab with crontab -e
      #*/30 * * * * /bin/bash /opt/application/dynhost/update.sh >> /var/log/dynhost.txt 2>&1

      printf "\n\n"
      date
      cd /opt/application/dynhost

      #Get credentials : USER & PASSWORD from file .env
      source .env

      # Get current public IP
      ip=$(curl --fail --silent  https://ipinfo.io/ip)
      if [ "$?" != "0" ]
      then
              printf "\n https://ipinfo.io/ip has failed. Trying https://ifconfig.me/"
              ip=$(curl --fail --silent https://ifconfig.me/)
      fi
      printf "\nGot IP as: $ip"
      current_ip=$(cat current.txt)
      printf "\nCurrent IP: $current_ip"

      if [ "$ip" != "$current_ip" ]
      then
        echo "$ip" > current.txt
        printf "\nNeed to update  domains IP as $ip"
        domains=$(cat domains.txt)
        for domain in ${domains[@]}
        do
              printf "\nUpdating domain $domain ..."
              curl --silent  -u $USER:$PASSWORD "http://www.ovh.com/nic/update?system=dyndns&hostname=$domain&myip=$ip"
        done
      else
        printf "\nNothing to do. Ip is the same..."
      fi

      # r=recursive, l=copy symlink, p=preserve permissions , t=preserve modif times
      # o=preserves owner, g=preserves group , v=verbose, z=compress during transfer
      # -D same as --devices --specials = preserves device and special files
      # --delete-after :receiver deletes after transfer, not during

      # mkdir -p ${BasePath}/opt-data/gitlab ${BasePath}/opt-app

      BasePath="/media/zabra/ExtremeSSD/.zabraHost"

      # Deployment files
      printf "\n\nBackup Application files...\n"
      rsync -rtD -vz --delete-after /opt/application/ ${BasePath}/opt-app/

      printf "\n\nBackup NextCloud + mariaDB...\n"
      rsync -rlptD -H -S -vz --delete-after --exclude=gitlab /opt/data/ ${BasePath}/opt-data/

      printf "\n\nCreate Gitlab Backup...\n"
      rm -rf /opt/data/gitlab/data/backups/*
      docker exec -t gitlab gitlab-backup create
      printf "\n\nBackup Gitlab"
      rsync -rtD -vz --delete-after /opt/data/gitlab/data/backups ${BasePath}/opt-data/gitlab/
      rsync -rtD -vz --delete-after /opt/data/gitlab/config ${BasePath}/opt-data/gitlab/