Compare commits

...

8 Commits

Author SHA1 Message Date
acb85a5ced erreur noms fichiers 2022-11-18 23:04:10 +01:00
edb32c7e51 ajout dokcer-traefik-nextcloud 2022-11-18 22:47:50 +01:00
917a0ada90 chgt hostname 2022-11-17 19:43:36 +01:00
7513d39eb6 nettoyage 2022-11-17 19:41:39 +01:00
0436310086 modif spour substitution des parametres 2022-11-17 13:56:43 +01:00
82659b67e9 ??? 2022-11-17 11:38:22 +01:00
c7d69b2af3 chgt back-ticks dans hosts et <<- par << pour le here-doc 2022-11-17 08:48:01 +01:00
9ec91834aa typo 2022-11-17 00:50:40 +01:00
2 changed files with 103 additions and 59 deletions

View File

@ -13,7 +13,7 @@ Vagrant.configure("2") do |config|
# Every Vagrant development environment requires a box. You can search for
# boxes at https://vagrantcloud.com/search.
config.vm.box = "debian/bullseye64"
config.vm.hostname = "traefikb"
config.vm.hostname = "nextcloud-traefik"
# Disable automatic box update checking. If you disable this, then
# boxes will only be checked for updates when the user runs
@ -66,22 +66,25 @@ Vagrant.configure("2") do |config|
# documentation for more information about their specific syntax and use.
config.vm.provision "shell", inline: <<-SHELL
apt-get update
apt-get install -y wget curl git vim libnss3-tools
apt install -y wget curl git vim
if ! which docker ; then
curl -s -o getdocker.sh https://get.docker.com
bash getdocker.sh
gpasswd -a vagrant docker
fi
mkdir -p docker/traefik && cd docker/traefiki
mkdir www
echo "my.nginx" > www/index.html
cat > docker-compose.yml <<-EOT
mkdir -p nextcloud && cd nextcloud
cat > traefik.yml <<-'EOT'
version: '3'
networks:
proxy:
external: true
services:
reverse-proxy:
# The official v2 Traefik docker image
image: traefik:latest
image: traefik:v2.9
container_name: traefik
# Enables the web UI and tells Traefik to listen to docker
command: --api.insecure=true --providers.docker
ports:
@ -92,15 +95,63 @@ services:
volumes:
# So that Traefik can listen to the Docker events
- /var/run/docker.sock:/var/run/docker.sock
nginx:
# A container that exposes an API to show its IP address
image: nginx:1.23-alpine
networks:
- proxy
'EOT'
cat > nextcloud.yml <<-'EOT'
version: '2'
volumes:
-v ./www:/usr/share/nginx/html:ro
nextcloud:
db:
networks:
proxy:
external: true
nxc:
external: false
services:
db:
image: mariadb:10.5
container_name: db
restart: always
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
volumes:
- db:/var/lib/mysql
networks:
- nxc
environment:
- MYSQL_ROOT_PASSWORD=Azerty1+
- MYSQL_PASSWORD=Azerty1+
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
app:
image: nextcloud
container_name: app
restart: always
# ports:
# - 8081:80
links:
- db
volumes:
- nextcloud:/var/www/html
networks:
- proxy
- nxc
labels:
- "traefik.http.routers.nginx.rule=Host(`my.nginx`)"
EOT
docker compose up -d
- "traefik.http.routers.app.rule=Host(`mon.nxc`)"
environment:
- MYSQL_PASSWORD=Azerty1+
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
- MYSQL_HOST=db
'EOT'
docker network create proxy
docker compose -f traefik.yml up -d
docker compose -f nextcloud.yml up -d
ip -br a
SHELL
end

View File

@ -73,50 +73,43 @@ Vagrant.configure("2") do |config|
gpasswd -a vagrant docker
fi
mkdir -p docker/traefik && cd docker/traefik
wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-linux-amd64
chmod +x mkcert-v*-linux-amd64
cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
mkdir certs && cd certs
mkcert your-domain.net
cd ..
mkdir nginx
echo "my.nginx" > nginx/index.html
mkdir nginx2
echo "my.nginx2" > nginx2/index.html
#cat > docker-compose.yml <<-EOT
cat > docker-compose.yml <<'EOT'
version: '3'
cat > docker-compose.yml <<-EOT
version: "3.2"
traefik:
services:
reverse-proxy:
# The official v2 Traefik docker image
image: traefik:latest
command:
- --entrypoints.web.address=:80
- --entrypoints.websecure.address=:443
- --providers.docker=true
- --providers.file.directory=/etc/traefik/dynamic_conf
- --providers.file.watch=true
# Enables the web UI and tells Traefik to listen to docker
command: --api.insecure=true --providers.docker
ports:
- 80:80
- 443:443
# The HTTP port
- "80:80"
# The Web UI (enabled by --api.insecure=true)
- "8080:8080"
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- ./certs/:/certs/:ro
- ./traefik.yml:/etc/traefik/dynamic_conf/conf.yml:ro
web:
image: nginx:1.17.8-alpine
# So that Traefik can listen to the Docker events
- /var/run/docker.sock:/var/run/docker.sock
nginx:
# A container that exposes an API to show its IP address
image: nginx:1.23-alpine
volumes:
- ./nginx:/usr/share/nginx/html:ro
labels:
# http with redirection
- traefik.http.middlewares.redirect-middleware.redirectscheme.scheme=https
- traefik.http.routers.web-router.entrypoints=web
- traefik.http.routers.web-router.rule=Host(`your-domain.net`)
- traefik.http.routers.web-router.middlewares=redirect-middleware
# https
- traefik.http.routers.websecure-router.entrypoints=websecure
- traefik.http.routers.websecure-router.tls=true
- traefik.http.routers.websecure-router.rule=Host(`your-domain.net`)
EOT
cat > mariadb.env <<-EOT
tls:
certificates:
- certFile: /certs/awx.afone.priv.crt
keyFile: /certs/awx.afone.priv.key
EOT
- "traefik.http.routers.nginx.rule=Host(`my.nginx`)"
nginx2:
# A container that exposes an API to show its IP address
image: nginx:1.23-alpine
volumes:
- ./nginx2:/usr/share/nginx/html:ro
labels:
- "traefik.http.routers.nginx2.rule=Host(`my.nginx2`)"
'EOT'
docker compose up -d
ip -br a
SHELL