docker-swarm

name	docker-swarm
description	Docker Swarm deployment patterns covering stack deployments, networking, TLS certificates, NFS permissions, Portainer management, and GPU workloads. Use when deploying or managing Docker Swarm services.

Docker Swarm Deployment Patterns

Deployment Standards

• All services deploy as Docker Swarm stacks - NOT standalone containers
• Use compose files for stack definitions
• Store compose templates in version control
• Deploy with automation (Ansible playbooks, Terraform, CI/CD)

Stack Deployment

Deploy a Stack

docker stack deploy -c compose.yml <stack-name>

Manage Stacks

docker stack ls                    # List all stacks
docker stack services <stack-name> # List services in a stack
docker stack rm <stack-name>       # Remove a stack
docker service logs <service>      # View service logs
docker service update --force <service>  # Force restart

Traefik TLS Certificates

Strategy: Individual Certs Per Service (NOT Wildcard)

• Each service gets its own Let's Encrypt certificate via DNS-01 challenge
• If some services have valid LE certs and others have "TRAEFIK DEFAULT CERT", it's likely a Let's Encrypt rate limit issue
• LE rate limits: 50 certs per registered domain per week
• Fix: Wait for rate limit to reset, or check Traefik logs for ACME errors

DNS vs SSL Strategy

• DNS Wildcard: *.apps.example.com -> <manager-ip> (for automatic resolution)