Dedicated example for Traefik

.github/FUNDING.yml

@@ -1,2 +1,2 @@
-patreon: crazymax
+github: crazy-max
 custom: https://www.paypal.me/crazyws

.github/labels.yml

@@ -0,0 +1,69 @@
+## https://github.com/crazy-max/ghaction-github-labeler
+- # bot
+  name: ":robot: bot"
+  color: "69cde9"
+  description: ""
+- # bug
+  name: ":bug: bug"
+  color: "b60205"
+  description: ""
+- # documentation
+  name: ":memo: documentation"
+  color: "c5def5"
+  description: ""
+- # duplicate
+  name: ":busts_in_silhouette: duplicate"
+  color: "cccccc"
+  description: ""
+- # enhancement
+  name: ":sparkles: enhancement"
+  color: "0054ca"
+  description: ""
+- # feature request
+  name: ":bulb: feature request"
+  color: "0e8a16"
+  description: ""
+- # feedback
+  name: ":mega: feedback"
+  color: "03a9f4"
+  description: ""
+- # future maybe
+  name: ":rocket: future maybe"
+  color: "fef2c0"
+  description: ""
+- # good first issue
+  name: ":hatching_chick: good first issue"
+  color: "7057ff"
+  description: ""
+- # help wanted
+  name: ":pray: help wanted"
+  color: "4caf50"
+  description: ""
+- # hold
+  name: ":hand: hold"
+  color: "24292f"
+  description: ""
+- # invalid
+  name: ":no_entry_sign: invalid"
+  color: "e6e6e6"
+  description: ""
+- # maybe bug
+  name: ":interrobang: maybe bug"
+  color: "ff5722"
+  description: ""
+- # needs more info
+  name: ":thinking: needs more info"
+  color: "795548"
+  description: ""
+- # question
+  name: ":question: question"
+  color: "3f51b5"
+  description: ""
+- # upstream
+  name: ":eyes: upstream"
+  color: "fbca04"
+  description: ""
+- # wontfix
+  name: ":coffin: wontfix"
+  color: "ffffff"
+  description: ""

.github/workflows/build.yml

@@ -1,11 +1,13 @@
 name: build
 
 on:
-  pull_request:
-    branches: 'master'
   push:
     branches: 'master'
     tags: '*'
+    paths:
+      - '.github/workflows/build.yml'
+      - 'Dockerfile'
+      - 'entrypoint.sh'
 
 jobs:
   build:
@@ -41,9 +43,9 @@ jobs:
         run: |
           docker buildx build --platform ${{ steps.prepare.outputs.docker_platforms }} \
             --output "type=image,push=false" \
-            --label "org.label-schema.build-date=${{ steps.prepare.outputs.build_date }}" \
+            --build-arg "BUILD_DATE=${{ steps.prepare.outputs.build_date }}" \
-            --label "org.label-schema.version=${{ steps.prepare.outputs.version }}" \
+            --build-arg "VCS_REF=${GITHUB_SHA::8}" \
-            --label "org.label-schema.vcs-ref=${GITHUB_SHA::8}" \
+            --build-arg "VERSION=${{ steps.prepare.outputs.version }}" \
             --tag "${{ steps.prepare.outputs.docker_image }}:latest" \
             --tag "${{ steps.prepare.outputs.docker_image }}:${{ steps.prepare.outputs.version }}" \
             --file Dockerfile .
@@ -60,9 +62,9 @@ jobs:
         run: |
           docker buildx build --platform ${{ steps.prepare.outputs.docker_platforms }} \
             --output "type=image,push=true" \
-            --label "org.label-schema.build-date=${{ steps.prepare.outputs.build_date }}" \
+            --build-arg "BUILD_DATE=${{ steps.prepare.outputs.build_date }}" \
-            --label "org.label-schema.version=${{ steps.prepare.outputs.version }}" \
+            --build-arg "VCS_REF=${GITHUB_SHA::8}" \
-            --label "org.label-schema.vcs-ref=${GITHUB_SHA::8}" \
+            --build-arg "VERSION=${{ steps.prepare.outputs.version }}" \
             --tag "${{ steps.prepare.outputs.docker_image }}:${{ steps.prepare.outputs.version }}" \
             --tag "${{ steps.prepare.outputs.docker_image }}:latest" \
             --file Dockerfile .

.github/workflows/labels.yml

@@ -0,0 +1,25 @@
+name: labels
+
+on:
+  push:
+    branches:
+      - 'master'
+    paths:
+      - '.github/labels.yml'
+      - '.github/workflows/labels.yml'
+
+jobs:
+  labeler:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        # https://github.com/actions/checkout
+        name: Checkout
+        uses: actions/checkout@v1
+      -
+        # https://github.com/crazy-max/ghaction-github-labeler
+        name: Run Labeler
+        if: success()
+        uses: crazy-max/ghaction-github-labeler@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -3,8 +3,16 @@ name: test
 on:
   pull_request:
     branches: master
+    paths:
+      - '.github/workflows/test.yml'
+      - 'Dockerfile'
+      - 'entrypoint.sh'
   push:
     branches: master
+    paths:
+      - '.github/workflows/test.yml'
+      - 'Dockerfile'
+      - 'entrypoint.sh'
 
 jobs:
   test:

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 21137-RC2 (2019/11/17)
+
+* Allow to set custom `PUID`/`PGID`
+
+## 21137-RC1 (2019/10/24)
+
+* JetBrains License Server 21137
+
 ## 20308-RC4 (2019/10/10)
 
 * Optimize layers

Dockerfile

@@ -1,22 +1,46 @@
 # syntax=docker/dockerfile:experimental
-FROM --platform=${TARGETPLATFORM:-linux/amd64} adoptopenjdk:12-jre-hotspot
+FROM --platform=${TARGETPLATFORM:-linux/amd64} adoptopenjdk:12-jre-hotspot as suexec
+
+ARG BUILD_DATE
+ARG VCS_REF
+ARG VERSION
 
 ARG TARGETPLATFORM
 ARG BUILDPLATFORM
 RUN printf "I am running on ${BUILDPLATFORM:-linux/amd64}, building for ${TARGETPLATFORM:-linux/amd64}\n$(uname -a)\n"
 
+RUN  apt-get update \
+  && apt-get install -y --no-install-recommends \
+    gcc \
+    libc-dev \
+  && curl -o /usr/local/bin/su-exec.c https://raw.githubusercontent.com/ncopa/su-exec/master/su-exec.c \
+  && gcc -Wall /usr/local/bin/su-exec.c -o/usr/local/bin/su-exec \
+  && chown root:root /usr/local/bin/su-exec \
+  && chmod 0755 /usr/local/bin/su-exec
+
+FROM --platform=${TARGETPLATFORM:-linux/amd64} adoptopenjdk:12-jre-hotspot
+
+ARG BUILD_DATE
+ARG VCS_REF
+ARG VERSION
+
 LABEL maintainer="CrazyMax" \
+  org.label-schema.build-date=$BUILD_DATE \
   org.label-schema.name="jetbrains-license-server" \
   org.label-schema.description="JetBrains License Server" \
+  org.label-schema.version=$VERSION \
   org.label-schema.url="https://github.com/crazy-max/docker-jetbrains-license-server" \
+  org.label-schema.vcs-ref=$VCS_REF \
   org.label-schema.vcs-url="https://github.com/crazy-max/docker-jetbrains-license-server" \
   org.label-schema.vendor="CrazyMax" \
   org.label-schema.schema-version="1.0"
 
 ENV JLS_PATH="/opt/jetbrains-license-server" \
-  JLS_VERSION="20308" \
+  JLS_VERSION="21137" \
-  JLS_SHA256="15cd436d41b1af8e273b8f8b037d654a9e9d9ca8a5f188e08426ca1024ba143a" \
+  JLS_SHA256="05241f0d41644ecc7679a879c829e57d423e151b997b45c5e986d498d6fe2f21" \
-  TZ="UTC"
+  TZ="UTC" \
+  PUID="1000" \
+  PGID="1000"
 
 RUN apt-get update \
   && apt-get install -y \
@@ -31,17 +55,16 @@ RUN apt-get update \
   && rm -f "/tmp/jls.zip" \
   && chmod a+x "$JLS_PATH/bin/license-server.sh" \
   && ln -sf "$JLS_PATH/bin/license-server.sh" "/usr/local/bin/license-server" \
-  && groupadd -f -g 1000 jls \
+  && groupadd -f -g ${PGID} jls \
-  && useradd -o -s /bin/bash -d /data -u 1000 -g 1000 -m jls \
+  && useradd -o -s /bin/bash -d /data -u ${PUID} -g jls -m jls \
   && chown -R jls. /data "$JLS_PATH" \
   && apt-get clean \
   && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
+COPY --from=suexec /usr/local/bin/su-exec /usr/local/bin/su-exec
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod a+x /entrypoint.sh
 
-USER jls
-
 EXPOSE 8000
 WORKDIR /data
 VOLUME [ "/data" ]

README.md

@@ -6,7 +6,7 @@
   <a href="https://hub.docker.com/r/crazymax/jetbrains-license-server/"><img src="https://img.shields.io/docker/stars/crazymax/jetbrains-license-server.svg?style=flat-square" alt="Docker Stars"></a>
   <a href="https://hub.docker.com/r/crazymax/jetbrains-license-server/"><img src="https://img.shields.io/docker/pulls/crazymax/jetbrains-license-server.svg?style=flat-square" alt="Docker Pulls"></a>
   <a href="https://www.codacy.com/app/crazy-max/docker-jetbrains-license-server"><img src="https://img.shields.io/codacy/grade/eb420bc3e6ed49ff97cc261602228efa.svg?style=flat-square" alt="Code Quality"></a>
-  <br /><a href="https://www.patreon.com/crazymax"><img src="https://img.shields.io/badge/donate-patreon-f96854.svg?logo=patreon&style=flat-square" alt="Support me on Patreon"></a>
+  <br /><a href="https://github.com/sponsors/crazy-max"><img src="https://img.shields.io/badge/sponsor-crazy--max-181717.svg?logo=github&style=flat-square" alt="Become a sponsor"></a>
   <a href="https://www.paypal.me/crazyws"><img src="https://img.shields.io/badge/donate-paypal-00457c.svg?logo=paypal&style=flat-square" alt="Donate Paypal"></a>
 </p>
 
@@ -19,9 +19,11 @@ If you are interested, [check out](https://hub.docker.com/r/crazymax/) my other
 
 ## Features
 
+* Run as non-root user
+* Multi-platform image
 * License server completely customizable via environment variables
 * Registration data and configuration in a single directory
-* [Traefik](https://github.com/containous/traefik-library-image) as reverse proxy and creation/renewal of Let's Encrypt certificates
+* [Traefik](https://github.com/containous/traefik-library-image) as reverse proxy and creation/renewal of Let's Encrypt certificates (see [this template](examples/traefik))
 
 ## Docker
 
@@ -43,6 +45,8 @@ Image: crazymax/jetbrains-license-server:latest
 ### Environment variables
 
 * `TZ`: The timezone assigned to the container (default `UTC`)
+* `PUID`: Process UID (default `1000`)
+* `PGID`: Process GID (default `1000`)
 * `JLS_VIRTUAL_HOSTS`: [Virtual hosts](https://www.jetbrains.com/help/license_server/setting_host_and_port.html#d1010e63) where license server will be available (comma delimited for several hosts)
 * `JLS_CONTEXT`:  [Context path](https://www.jetbrains.com/help/license_server/setting_host_and_port.html#d1010e63) used by the license server (default `/`)
 * `JLS_ACCESS_CONFIG`: JSON file to configure [user restrictions](https://www.jetbrains.com/help/license_server/configuring_user_restrictions.html) (default `/data/access-config.json`)
@@ -59,7 +63,7 @@ Image: crazymax/jetbrains-license-server:latest
 
 * `/data`: Contains [registration data](https://www.jetbrains.com/help/license_server/migrate.html) and configuration
 
-> :warning: Note that the volume should be owned by uid `1000` and gid `1000`. If you don't give the volume correct permissions, the container may not start.
+> :warning: Note that the volumes should be owned by the user/group with the specified `PUID` and `PGID`. If you don't give the volume correct permissions, the container may not start.
 
 ### Ports
 
@@ -72,8 +76,6 @@ Image: crazymax/jetbrains-license-server:latest
 Docker compose is the recommended way to run this image. Copy the content of folder [examples/compose](examples/compose) in `/var/jls/` on your host for example. Edit the compose and env files with your preferences and run the following commands:
 
 ```bash
-touch acme.json
-chmod 600 acme.json
 docker-compose up -d
 docker-compose logs -f
 ```
@@ -85,14 +87,14 @@ You can also use the following minimal command :
 ```bash
 $ docker run -d -p 8000:8000 --name jetbrains_license_server \
   -e TZ="Europe/Paris" \
-  -e JLS_VIRTUAL_HOSTS=jetbrains-license-server.example.com \
+  -e JLS_VIRTUAL_HOSTS=jls.example.com \
   -v $(pwd)/data:/data \
   crazymax/jetbrains-license-server:latest
 ```
 
 ## Update
 
-Recreate the container whenever i push an update :
+Recreate the container whenever I push an update:
 
 ```bash
 docker-compose pull
@@ -115,12 +117,9 @@ That's because the license server is running behind a reverse proxy. Please conf
 
 ## How can I help ?
 
-All kinds of contributions are welcome :raised_hands:!<br />
+All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon: You can also support this project by [**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a [Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket:
-The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon:<br />
-But we're not gonna lie to each other, I'd rather you buy me a beer or two :beers:!
 
-[![Support me on Patreon](.res/patreon.png)](https://www.patreon.com/crazymax) 
+Thanks again for your support, it is much appreciated! :pray:
-[![Paypal Donate](.res/paypal.png)](https://www.paypal.me/crazyws)
 
 ## License
 

entrypoint.sh

@@ -6,13 +6,23 @@ JLS_PORT=8000
 JLS_CONTEXT=${JLS_CONTEXT:-/}
 JLS_ACCESS_CONFIG=${JLS_ACCESS_CONFIG:-/data/access-config.json}
 
+if [ -n "${PGID}" ] && [ "${PGID}" != "$(id -g jls)" ]; then
+  echo "Switching to PGID ${PGID}..."
+  sed -i -e "s/^jls:\([^:]*\):[0-9]*/jls:\1:${PGID}/" /etc/group
+  sed -i -e "s/^jls:\([^:]*\):\([0-9]*\):[0-9]*/jls:\1:\2:${PGID}/" /etc/passwd
+fi
+if [ -n "${PUID}" ] && [ "${PUID}" != "$(id -u jls)" ]; then
+  echo "Switching to PUID ${PUID}..."
+  sed -i -e "s/^jls:\([^:]*\):[0-9]*:\([0-9]*\)/jls:\1:${PUID}:\2/" /etc/passwd
+fi
+
 # Init
 echo "Initializing files and folders..."
-touch "/data/access-config.json"
+su-exec jls:jls touch "/data/access-config.json"
 
 # https://www.jetbrains.com/help/license_server/setting_host_and_port.html
 echo "Configuring Jetbrains License Server..."
-license-server configure --listen ${JLS_LISTEN_ADDRESS} --port ${JLS_PORT} --context ${JLS_CONTEXT}
+su-exec jls:jls license-server configure --listen ${JLS_LISTEN_ADDRESS} --port ${JLS_PORT} --context ${JLS_CONTEXT}
 
 # https://www.jetbrains.com/help/license_server/setting_host_and_port.html
 if [ ! -z "$JLS_VIRTUAL_HOSTS" ] ; then
@@ -20,45 +30,48 @@ if [ ! -z "$JLS_VIRTUAL_HOSTS" ] ; then
   for JLS_VIRTUAL_HOST in $(echo ${JLS_VIRTUAL_HOSTS} | tr "," "\n"); do
     echo "-> ${JLS_VIRTUAL_HOST}"
   done
-  license-server configure --jetty.virtualHosts.names=${JLS_VIRTUAL_HOSTS}
+  su-exec jls:jls license-server configure --jetty.virtualHosts.names=${JLS_VIRTUAL_HOSTS}
 fi
 
 # https://www.jetbrains.com/help/license_server/configuring_user_restrictions.html
 if [ -s "$JLS_ACCESS_CONFIG" ]; then
   echo "Enabling user restrictions access from $JLS_ACCESS_CONFIG..."
-  license-server configure --access.config=file:${JLS_ACCESS_CONFIG}
+  su-exec jls:jls license-server configure --access.config=file:${JLS_ACCESS_CONFIG}
 fi
 
 # https://www.jetbrains.com/help/license_server/detailed_server_usage_statistics.html
 if [ ! -z "$JLS_SMTP_SERVER" -a ! -z "$JLS_STATS_RECIPIENTS" ] ; then
   JLS_SMTP_PORT=${JLS_SMTP_PORT:-25}
   echo "Enabling User Reporting via SMTP at $JLS_SMTP_SERVER:$JLS_SMTP_PORT..."
-  license-server configure --smtp.server ${JLS_SMTP_SERVER} --smtp.server.port ${JLS_SMTP_PORT}
+  su-exec jls:jls license-server configure --smtp.server ${JLS_SMTP_SERVER} --smtp.server.port ${JLS_SMTP_PORT}
 
   if [ ! -z "$JLS_SMTP_USERNAME" -a ! -z "$JLS_SMTP_PASSWORD" ] ; then
     echo "Using SMTP username $JLS_SMTP_USERNAME with password..."
-    license-server configure --smtp.server.username ${JLS_SMTP_USERNAME}
+    su-exec jls:jls license-server configure --smtp.server.username ${JLS_SMTP_USERNAME}
-    license-server configure --smtp.server.password ${JLS_SMTP_PASSWORD}
+    su-exec jls:jls license-server configure --smtp.server.password ${JLS_SMTP_PASSWORD}
   fi
 
   if [ ! -z "$JLS_STATS_FROM" ] ; then
     echo "Setting stats sender to $JLS_STATS_FROM..."
-    license-server configure --stats.from ${JLS_STATS_FROM}
+    su-exec jls:jls license-server configure --stats.from ${JLS_STATS_FROM}
   fi
 
   if [ "$JLS_REPORT_OUT_OF_LICENSE" -gt 0 ]; then
     echo "Setting report out of licence to $JLS_REPORT_OUT_OF_LICENSE%..."
-    license-server configure --reporting.out.of.license.threshold ${JLS_REPORT_OUT_OF_LICENSE}
+    su-exec jls:jls license-server configure --reporting.out.of.license.threshold ${JLS_REPORT_OUT_OF_LICENSE}
   fi
 
   echo "Stats recipients: $JLS_STATS_RECIPIENTS..."
-  license-server configure --stats.recipients ${JLS_STATS_RECIPIENTS}
+  su-exec jls:jls license-server configure --stats.recipients ${JLS_STATS_RECIPIENTS}
 fi
 
 # https://www.jetbrains.com/help/license_server/detailed_server_usage_statistics.html
 if [ ! -z "$JLS_STATS_TOKEN" ] ; then
   echo "Enabling stats via API at /$JLS_STATS_TOKEN..."
-  license-server configure --reporting.token ${JLS_STATS_TOKEN}
+  su-exec jls:jls license-server configure --reporting.token ${JLS_STATS_TOKEN}
 fi
 
-exec "$@"
+echo "Fixing perms..."
+chown -R jls:jls /data "$JLS_PATH"
+
+exec su-exec jls:jls "$@"

examples/compose/docker-compose.yml

@@ -1,63 +1,18 @@
 version: "3.2"
 
 services:
-  traefik:
+  jls:
-    image: traefik:1.7-alpine
-    container_name: traefik
-    command:
-      - "--logLevel=INFO"
-      - "--defaultentrypoints=http,https"
-      - "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
-      - "--entryPoints=Name:https Address::443 TLS"
-      - "--docker"
-      - "--docker.exposedbydefault=false"
-      - "--docker.domain=example.com"
-      - "--acme=false"
-      - "--acme.acmelogging=true"
-      - "--acme.email=webmaster@example.com"
-      - "--acme.storage=acme.json"
-      - "--acme.entryPoint=https"
-      - "--acme.onhostrule=true"
-      - "--acme.httpchallenge=true"
-      - "--acme.httpchallenge.entrypoint=http"
-    ports:
-      - target: 80
-        published: 80
-        protocol: tcp
-      - target: 443
-        published: 443
-        protocol: tcp
-    volumes:
-      - "./acme.json:/acme.json"
-      - "/var/run/docker.sock:/var/run/docker.sock"
-    restart: always
-
-  app:
     image: crazymax/jetbrains-license-server:latest
-    container_name: jetbrains_license_server
+    container_name: jls
-    depends_on:
+    ports:
-      - traefik
+      - target: 8000
+        published: 8000
+        protocol: tcp
     volumes:
-      - "jetbrains-license-server:/data"
+      - "jls:/data"
-    labels:
+    env_file:
-      - "traefik.enable=true"
+      - "./jls.env"
-      - "traefik.backend=jetbrains-license-server"
-      - "traefik.port=8000"
-      - "traefik.frontend.rule=Host:jetbrains-license-server.example.com,an-other-host.example.com"
-    environment:
-      - "TZ=Europe/Paris"
-      - "JLS_VIRTUAL_HOSTS=jetbrains-license-server.example.com,an-other-host.example.com"
-      - "JLS_CONTEXT=/"
-      - "JLS_ACCESS_CONFIG=/data/access-config.json"
-      - "JLS_STATS_RECIPIENTS=webmaster@example.com,an-other-address@example.com"
-      - "JLS_REPORT_OUT_OF_LICENSE=90"
-      - "JLS_SMTP_SERVER=smtp.example.com"
-      - "JLS_SMTP_PORT=25"
-      - "JLS_SMTP_USERNAME=smtp@example.com"
-      - "JLS_SMTP_PASSWORD="
-      - "JLS_STATS_FROM=jetbrains@example.com"
-      - "JLS_STATS_TOKEN=0123456789ABCDEF"
     restart: always
 
 volumes:
-  jetbrains-license-server:
+  jls:

examples/compose/jls.env

@@ -0,0 +1,12 @@
+TZ=Europe/Paris
+JLS_VIRTUAL_HOSTS=127.0.0.1,jls.example.com
+JLS_CONTEXT=/
+JLS_ACCESS_CONFIG=/data/access-config.json
+JLS_STATS_RECIPIENTS=webmaster@example.com,an-other-address@example.com
+JLS_REPORT_OUT_OF_LICENSE=90
+JLS_SMTP_SERVER=smtp.example.com
+JLS_SMTP_PORT=25
+JLS_SMTP_USERNAME=smtp@example.com
+JLS_SMTP_PASSWORD=
+JLS_STATS_FROM=jetbrains@example.com
+JLS_STATS_TOKEN=0123456789ABCDEF

examples/traefik/README.md

@@ -0,0 +1,8 @@
+## Usage
+
+```bash
+touch acme.json
+chmod 600 acme.json
+docker-compose up -d
+docker-compose logs -f
+```

examples/traefik/docker-compose.yml

@@ -0,0 +1,50 @@
+version: "3.2"
+
+services:
+  traefik:
+    image: traefik:1.7-alpine
+    container_name: traefik
+    command:
+      - "--logLevel=INFO"
+      - "--defaultentrypoints=http,https"
+      - "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
+      - "--entryPoints=Name:https Address::443 TLS"
+      - "--docker"
+      - "--docker.exposedbydefault=false"
+      - "--docker.domain=example.com"
+      - "--acme=false"
+      - "--acme.acmelogging=true"
+      - "--acme.email=webmaster@example.com"
+      - "--acme.storage=acme.json"
+      - "--acme.entryPoint=https"
+      - "--acme.onhostrule=true"
+      - "--acme.httpchallenge=true"
+      - "--acme.httpchallenge.entrypoint=http"
+    ports:
+      - target: 80
+        published: 80
+        protocol: tcp
+      - target: 443
+        published: 443
+        protocol: tcp
+    volumes:
+      - "./acme.json:/acme.json"
+      - "/var/run/docker.sock:/var/run/docker.sock"
+    restart: always
+
+  jls:
+    image: crazymax/jetbrains-license-server:latest
+    container_name: jls
+    volumes:
+      - "jls:/data"
+    labels:
+      - "traefik.enable=true"
+      - "traefik.backend=jls"
+      - "traefik.port=8000"
+      - "traefik.frontend.rule=Host:jls.example.com,an-other-host.example.com"
+    env_file:
+      - "./jls.env"
+    restart: always
+
+volumes:
+  jls:

examples/traefik/jls.env

@@ -0,0 +1,12 @@
+TZ=Europe/Paris
+JLS_VIRTUAL_HOSTS=jls.example.com,an-other-host.example.com
+JLS_CONTEXT=/
+JLS_ACCESS_CONFIG=/data/access-config.json
+JLS_STATS_RECIPIENTS=webmaster@example.com,an-other-address@example.com
+JLS_REPORT_OUT_OF_LICENSE=90
+JLS_SMTP_SERVER=smtp.example.com
+JLS_SMTP_PORT=25
+JLS_SMTP_USERNAME=smtp@example.com
+JLS_SMTP_PASSWORD=
+JLS_STATS_FROM=jetbrains@example.com
+JLS_STATS_TOKEN=0123456789ABCDEF