mirror of
https://github.com/stellarshenson/stellars-jupyterhub-ds.git
synced 2026-03-07 21:50:28 +00:00
97 lines
3.5 KiB
YAML
97 lines
3.5 KiB
YAML
# Copyright (c) Jupyter Development Team.
|
|
# Distributed under the terms of the Modified BSD License.
|
|
|
|
services:
|
|
|
|
# Proxy for smart trafic routing to make it possible to host multiple similar containers
|
|
# exposing ports 80, 413 & 8080 to force docker to keep only one traefik service
|
|
# traefik dashboard is available under http://localhost:8080/dashboard
|
|
traefik:
|
|
image: traefik:latest
|
|
container_name: ${COMPOSE_PROJECT_NAME:-stellars-jupyterhub-ds}-traefik
|
|
command:
|
|
- "--entrypoints.web.address=:80"
|
|
- "--entrypoints.websecure.address=:443"
|
|
- "--providers.docker=true"
|
|
- "--providers.docker.exposedbydefault=false"
|
|
- "--api.dashboard=true"
|
|
- "--api.insecure=true"
|
|
- "--providers.file.filename=/mnt/certs/certs.yml" # certificates generated by jupyterlab container
|
|
- "--serverstransport.insecureskipverify=true" # required for https passthrough
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "8080:8080"
|
|
volumes:
|
|
# access to docker socket to see if service is healthy
|
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
# named volume to hold certificates
|
|
- vol_certs:/mnt/certs
|
|
depends_on:
|
|
jupyterhub:
|
|
condition: service_healthy
|
|
networks:
|
|
- jupyterhub-network
|
|
restart: unless-stopped
|
|
|
|
# service for management of a series of users and their jupyterlab
|
|
# environments. it is internally managed via a proxy that redirects
|
|
# users to their dedicated environments
|
|
jupyterhub:
|
|
build:
|
|
context: build
|
|
dockerfile: Dockerfile.jupyterhub
|
|
image: stellars/stellars-jupyterhub-ds:latest
|
|
container_name: ${COMPOSE_PROJECT_NAME:-stellars-jupyterhub-ds}-jupyterhub
|
|
volumes:
|
|
# JupyterHub configuration file
|
|
- ./conf/jupyterhub_config.py:/srv/jupyterhub/jupyterhub_config.py:ro
|
|
# docker socket on the host so we can connect to the daemon from within the container
|
|
- /var/run/docker.sock:/var/run/docker.sock:rw
|
|
# bind Docker volume on host for JupyterHub database and cookie secrets
|
|
- vol_hub_data:/data
|
|
# this is where certificates will be generated
|
|
- vol_certs:/mnt/certs
|
|
ports:
|
|
- 8000:8000
|
|
environment:
|
|
# This username will be a JupyterHub admin
|
|
JUPYTERHUB_ADMIN: admin
|
|
# All containers will join this network
|
|
DOCKER_NETWORK_NAME: jupyterhub-network
|
|
# JupyterHub will spawn this Notebook image for users
|
|
DOCKER_NOTEBOOK_IMAGE: stellars/stellars-jupyterlab-ds:latest
|
|
# Notebook directory inside user image
|
|
DOCKER_NOTEBOOK_DIR: /home/lab/workspace
|
|
# default prefix
|
|
JUPYTERHUB_BASE_URL: /jupyterhub
|
|
labels:
|
|
# Enable proxy support from Traefik
|
|
- "traefik.enable=true"
|
|
|
|
# ⚙ Jupyterhub Service (8000)
|
|
- "traefik.http.routers.jupyterhub-rtr.rule=Path(`/jupyterhub`) || PathPrefix(`/jupyterhub/`)"
|
|
- "traefik.http.routers.jupyterhub-rtr.entrypoints=websecure"
|
|
- "traefik.http.routers.jupyterhub-rtr.service=jupyterhub-svc"
|
|
- "traefik.http.routers.jupyterhub-rtr.tls=true"
|
|
- "traefik.http.services.jupyterhub-svc.loadbalancer.server.scheme=http"
|
|
- "traefik.http.services.jupyterhub-svc.loadbalancer.server.port=8000"
|
|
networks:
|
|
- jupyterhub-network
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pgrep -f jupytehub-singleuser > /dev/null || exit 1"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 10
|
|
start_period: 5s
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
vol_hub_data:
|
|
vol_certs:
|
|
|
|
networks:
|
|
jupyterhub-network:
|
|
name: jupyterhub-network
|
|
|