Compare commits

...

7 Commits

Author SHA1 Message Date
acb85a5ced erreur noms fichiers 2022-11-18 23:04:10 +01:00
edb32c7e51 ajout dokcer-traefik-nextcloud 2022-11-18 22:47:50 +01:00
917a0ada90 chgt hostname 2022-11-17 19:43:36 +01:00
7513d39eb6 nettoyage 2022-11-17 19:41:39 +01:00
0436310086 modif spour substitution des parametres 2022-11-17 13:56:43 +01:00
82659b67e9 ??? 2022-11-17 11:38:22 +01:00
c7d69b2af3 chgt back-ticks dans hosts et <<- par << pour le here-doc 2022-11-17 08:48:01 +01:00
2 changed files with 103 additions and 59 deletions

View File

@ -13,7 +13,7 @@ Vagrant.configure("2") do |config|
# Every Vagrant development environment requires a box. You can search for # Every Vagrant development environment requires a box. You can search for
# boxes at https://vagrantcloud.com/search. # boxes at https://vagrantcloud.com/search.
config.vm.box = "debian/bullseye64" config.vm.box = "debian/bullseye64"
config.vm.hostname = "traefikb" config.vm.hostname = "nextcloud-traefik"
# Disable automatic box update checking. If you disable this, then # Disable automatic box update checking. If you disable this, then
# boxes will only be checked for updates when the user runs # boxes will only be checked for updates when the user runs
@ -66,22 +66,25 @@ Vagrant.configure("2") do |config|
# documentation for more information about their specific syntax and use. # documentation for more information about their specific syntax and use.
config.vm.provision "shell", inline: <<-SHELL config.vm.provision "shell", inline: <<-SHELL
apt-get update apt-get update
apt-get install -y wget curl git vim libnss3-tools apt install -y wget curl git vim
if ! which docker ; then if ! which docker ; then
curl -s -o getdocker.sh https://get.docker.com curl -s -o getdocker.sh https://get.docker.com
bash getdocker.sh bash getdocker.sh
gpasswd -a vagrant docker gpasswd -a vagrant docker
fi fi
mkdir -p docker/traefik && cd docker/traefik mkdir -p nextcloud && cd nextcloud
mkdir www cat > traefik.yml <<-'EOT'
echo "my.nginx" > www/index.html
cat > docker-compose.yml <<-EOT
version: '3' version: '3'
networks:
proxy:
external: true
services: services:
reverse-proxy: reverse-proxy:
# The official v2 Traefik docker image # The official v2 Traefik docker image
image: traefik:latest image: traefik:v2.9
container_name: traefik
# Enables the web UI and tells Traefik to listen to docker # Enables the web UI and tells Traefik to listen to docker
command: --api.insecure=true --providers.docker command: --api.insecure=true --providers.docker
ports: ports:
@ -92,16 +95,64 @@ services:
volumes: volumes:
# So that Traefik can listen to the Docker events # So that Traefik can listen to the Docker events
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
nginx: networks:
# A container that exposes an API to show its IP address - proxy
image: nginx:1.23-alpine
'EOT'
cat > nextcloud.yml <<-'EOT'
version: '2'
volumes:
nextcloud:
db:
networks:
proxy:
external: true
nxc:
external: false
services:
db:
image: mariadb:10.5
container_name: db
restart: always
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
volumes: volumes:
-v ./www:/usr/share/nginx/html:ro - db:/var/lib/mysql
networks:
- nxc
environment:
- MYSQL_ROOT_PASSWORD=Azerty1+
- MYSQL_PASSWORD=Azerty1+
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
app:
image: nextcloud
container_name: app
restart: always
# ports:
# - 8081:80
links:
- db
volumes:
- nextcloud:/var/www/html
networks:
- proxy
- nxc
labels: labels:
- "traefik.http.routers.nginx.rule=Host(`my.nginx`)" - "traefik.http.routers.app.rule=Host(`mon.nxc`)"
EOT environment:
docker compose up -d - MYSQL_PASSWORD=Azerty1+
- MYSQL_DATABASE=nextcloud
- MYSQL_USER=nextcloud
- MYSQL_HOST=db
'EOT'
docker network create proxy
docker compose -f traefik.yml up -d
docker compose -f nextcloud.yml up -d
ip -br a ip -br a
SHELL SHELL
end end

View File

@ -73,52 +73,45 @@ Vagrant.configure("2") do |config|
gpasswd -a vagrant docker gpasswd -a vagrant docker
fi fi
mkdir -p docker/traefik && cd docker/traefik mkdir -p docker/traefik && cd docker/traefik
wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-linux-amd64 mkdir nginx
chmod +x mkcert-v*-linux-amd64 echo "my.nginx" > nginx/index.html
cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert mkdir nginx2
mkdir certs && cd certs echo "my.nginx2" > nginx2/index.html
mkcert your-domain.net #cat > docker-compose.yml <<-EOT
cd .. cat > docker-compose.yml <<'EOT'
version: '3'
cat > docker-compose.yml <<-EOT services:
version: "3.2" reverse-proxy:
traefik: # The official v2 Traefik docker image
image: traefik:latest image: traefik:latest
command: # Enables the web UI and tells Traefik to listen to docker
- --entrypoints.web.address=:80 command: --api.insecure=true --providers.docker
- --entrypoints.websecure.address=:443 ports:
- --providers.docker=true # The HTTP port
- --providers.file.directory=/etc/traefik/dynamic_conf - "80:80"
- --providers.file.watch=true # The Web UI (enabled by --api.insecure=true)
ports: - "8080:8080"
- 80:80 volumes:
- 443:443 # So that Traefik can listen to the Docker events
volumes: - /var/run/docker.sock:/var/run/docker.sock
- /var/run/docker.sock:/var/run/docker.sock:ro nginx:
- ./certs/:/certs/:ro # A container that exposes an API to show its IP address
- ./traefik.yml:/etc/traefik/dynamic_conf/conf.yml:ro image: nginx:1.23-alpine
volumes:
web: - ./nginx:/usr/share/nginx/html:ro
image: nginx:1.17.8-alpine labels:
labels: - "traefik.http.routers.nginx.rule=Host(`my.nginx`)"
# http with redirection nginx2:
- traefik.http.middlewares.redirect-middleware.redirectscheme.scheme=https # A container that exposes an API to show its IP address
- traefik.http.routers.web-router.entrypoints=web image: nginx:1.23-alpine
- traefik.http.routers.web-router.rule=Host(`your-domain.net`) volumes:
- traefik.http.routers.web-router.middlewares=redirect-middleware - ./nginx2:/usr/share/nginx/html:ro
# https labels:
- traefik.http.routers.websecure-router.entrypoints=websecure - "traefik.http.routers.nginx2.rule=Host(`my.nginx2`)"
- traefik.http.routers.websecure-router.tls=true 'EOT'
- traefik.http.routers.websecure-router.rule=Host(`your-domain.net`)
EOT
cat > mariadb.env <<-EOT
tls:
certificates:
- certFile: /certs/awx.afone.priv.crt
keyFile: /certs/awx.afone.priv.key
EOT
docker compose up -d docker compose up -d
ip -br a ip -br a
SHELL SHELL
end end