80 lines
2.9 KiB
YAML
80 lines
2.9 KiB
YAML
# Example of Docker Compose setup using Traefik reverse proxy
|
|
|
|
version: '3'
|
|
|
|
services:
|
|
traefik:
|
|
image: traefik:v2.2.11
|
|
restart: always
|
|
ports:
|
|
- 443:443
|
|
- 80:80
|
|
- 1935:1935
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
- ./traefik_data:/data
|
|
command:
|
|
# Read docker-compose labels but do not expose by default
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
# Define entrypoints
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.web.http.redirections.entryPoint.to=websecure"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--entrypoints.rtmpsecure.address=:1935"
|
|
# Define certificates
|
|
- "--certificatesResolvers.mytlschallenge.acme.email=root@example.com"
|
|
- "--certificatesResolvers.mytlschallenge.acme.storage=/data/acme.json"
|
|
- "--certificatesResolvers.mytlschallenge.acme.httpChallenge.entryPoint=web"
|
|
|
|
# RTMP to WebRTC server
|
|
ovenmediaengine:
|
|
image: airensoft/ovenmediaengine:0.10.7
|
|
restart: always
|
|
ports:
|
|
# WebRTC ICE
|
|
- 10000-10005:10000-10005/udp
|
|
volumes:
|
|
- ./ovenmediaengine/conf/Server-docker.xml:/opt/ovenmediaengine/bin/origin_conf/Server.xml:ro
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.ovenmediaengine.rule=Host(`stream.example.com`) && PathPrefix(`/play/`)"
|
|
- "traefik.http.routers.ovenmediaengine.priority=101"
|
|
- "traefik.http.routers.ovenmediaengine.entrypoints=websecure"
|
|
- "traefik.http.routers.ovenmediaengine.tls.certresolver=mytlschallenge"
|
|
- "traefik.http.services.ovenmediaengine.loadbalancer.server.port=3333"
|
|
|
|
# RTMP server that authenticate stream against ghostream
|
|
rtmp_server:
|
|
# FIXME: nginx image does not have RTMP module
|
|
# this image should be build from this repo
|
|
image: tiangolo/nginx-rtmp:latest-2020-08-16
|
|
restart: always
|
|
volumes:
|
|
- ./nginx/nginx-docker.conf:/etc/nginx/nginx.conf:ro
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.tcp.routers.rtmp.rule=HostSNI(`stream.example.com`)"
|
|
- "traefik.tcp.routers.rtmp.entrypoints=rtmpsecure"
|
|
- "traefik.tcp.routers.rtmp.tls.certresolver=mytlschallenge"
|
|
- "traefik.tcp.services.rtmp.loadbalancer.server.port=1925"
|
|
|
|
# Ghostream is the web frontend to OvenMediaEngine
|
|
ghostream:
|
|
build: ../
|
|
restart: always
|
|
environment:
|
|
- FLASK_CONFIG=production
|
|
- LDAP_URI=ldap://127.0.0.1:389
|
|
- LDAP_USER_DN=cn=Users,dc=example,dc=com
|
|
- SITE_NAME=Ghostream
|
|
- SITE_HOSTNAME=localhost
|
|
- FAVICON=/favicon.ico
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.ghostream.rule=Host(`stream.example.com`)"
|
|
- "traefik.http.routers.ghostream.priority=100"
|
|
- "traefik.http.routers.ghostream.entrypoints=websecure"
|
|
- "traefik.http.routers.ghostream.tls.certresolver=mytlschallenge"
|
|
- "traefik.http.services.ghostream.loadbalancer.server.port=8080"
|