network isolation

netdata/docker-compose.netdata.yml

@@ -23,14 +23,16 @@ services:
       - /sys:/host/sys:ro
       - /etc/os-release:/host/etc/os-release:ro
     networks:
-      - srv       
+      - netdata-frontend
+      - netdata-backend       
     labels:
       - traefik.enable=true
       - traefik.http.routers.netdata.rule=Host(`${HOST_NETDATA}.${DOMAIN}`)
       - traefik.http.routers.netdata.entrypoints=https
       - traefik.http.routers.netdata.tls=true
       - traefik.http.routers.netdata.middlewares=auth
-      - traefik.http.middlewares.auth.basicauth.users=${BASIC_AUTH}       
+      - traefik.http.middlewares.auth.basicauth.users=${BASIC_AUTH}
+      - traefik.docker.network=netdata-frontend
     healthcheck:
       disable: true
   docker-proxy:
@@ -41,7 +43,7 @@ services:
     environment:
       - CONTAINERS=1
     networks:
-      - srv 
+      - netdata-backend 
 
 volumes:
   netdataconfig: