From 65ed4d5caf2a1baea888de8c355c9e040a990f1d Mon Sep 17 00:00:00 2001
From: Bret Fisher <bret@bretfisher.com>
Date: Wed, 12 Dec 2018 11:43:37 -0500
Subject: [PATCH] don't force traefik on managers

optionally force them on workers
---
 stack-proxy-global.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/stack-proxy-global.yml b/stack-proxy-global.yml
index 3c18a6a..d52a377 100644
--- a/stack-proxy-global.yml
+++ b/stack-proxy-global.yml
@@ -79,8 +79,9 @@ services:
       - --consul.prefix=traefik
     deploy:
       mode: global
-      placement:
-        constraints: [node.role == manager]
+      # if you have enough servers, make this only run on workers, maybe in a public DMZ
+      # placement:
+        # constraints: [node.role == worker]
     logging:
       options:
         max-size: "500k"