Compare commits
7 Commits
Author | SHA1 | Date | |
---|---|---|---|
acb85a5ced | |||
edb32c7e51 | |||
917a0ada90 | |||
7513d39eb6 | |||
0436310086 | |||
82659b67e9 | |||
c7d69b2af3 |
@ -13,7 +13,7 @@ Vagrant.configure("2") do |config|
|
|||||||
# Every Vagrant development environment requires a box. You can search for
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
# boxes at https://vagrantcloud.com/search.
|
# boxes at https://vagrantcloud.com/search.
|
||||||
config.vm.box = "debian/bullseye64"
|
config.vm.box = "debian/bullseye64"
|
||||||
config.vm.hostname = "traefikb"
|
config.vm.hostname = "nextcloud-traefik"
|
||||||
|
|
||||||
# Disable automatic box update checking. If you disable this, then
|
# Disable automatic box update checking. If you disable this, then
|
||||||
# boxes will only be checked for updates when the user runs
|
# boxes will only be checked for updates when the user runs
|
||||||
@ -66,22 +66,25 @@ Vagrant.configure("2") do |config|
|
|||||||
# documentation for more information about their specific syntax and use.
|
# documentation for more information about their specific syntax and use.
|
||||||
config.vm.provision "shell", inline: <<-SHELL
|
config.vm.provision "shell", inline: <<-SHELL
|
||||||
apt-get update
|
apt-get update
|
||||||
apt-get install -y wget curl git vim libnss3-tools
|
apt install -y wget curl git vim
|
||||||
if ! which docker ; then
|
if ! which docker ; then
|
||||||
curl -s -o getdocker.sh https://get.docker.com
|
curl -s -o getdocker.sh https://get.docker.com
|
||||||
bash getdocker.sh
|
bash getdocker.sh
|
||||||
gpasswd -a vagrant docker
|
gpasswd -a vagrant docker
|
||||||
fi
|
fi
|
||||||
mkdir -p docker/traefik && cd docker/traefik
|
mkdir -p nextcloud && cd nextcloud
|
||||||
mkdir www
|
cat > traefik.yml <<-'EOT'
|
||||||
echo "my.nginx" > www/index.html
|
|
||||||
cat > docker-compose.yml <<-EOT
|
|
||||||
version: '3'
|
version: '3'
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
external: true
|
||||||
|
|
||||||
services:
|
services:
|
||||||
reverse-proxy:
|
reverse-proxy:
|
||||||
# The official v2 Traefik docker image
|
# The official v2 Traefik docker image
|
||||||
image: traefik:latest
|
image: traefik:v2.9
|
||||||
|
container_name: traefik
|
||||||
# Enables the web UI and tells Traefik to listen to docker
|
# Enables the web UI and tells Traefik to listen to docker
|
||||||
command: --api.insecure=true --providers.docker
|
command: --api.insecure=true --providers.docker
|
||||||
ports:
|
ports:
|
||||||
@ -92,16 +95,64 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
# So that Traefik can listen to the Docker events
|
# So that Traefik can listen to the Docker events
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
nginx:
|
networks:
|
||||||
# A container that exposes an API to show its IP address
|
- proxy
|
||||||
image: nginx:1.23-alpine
|
|
||||||
|
'EOT'
|
||||||
|
cat > nextcloud.yml <<-'EOT'
|
||||||
|
version: '2'
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
nextcloud:
|
||||||
|
db:
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
external: true
|
||||||
|
nxc:
|
||||||
|
external: false
|
||||||
|
|
||||||
|
services:
|
||||||
|
db:
|
||||||
|
image: mariadb:10.5
|
||||||
|
container_name: db
|
||||||
|
restart: always
|
||||||
|
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
|
||||||
volumes:
|
volumes:
|
||||||
-v ./www:/usr/share/nginx/html:ro
|
- db:/var/lib/mysql
|
||||||
|
networks:
|
||||||
|
- nxc
|
||||||
|
environment:
|
||||||
|
- MYSQL_ROOT_PASSWORD=Azerty1+
|
||||||
|
- MYSQL_PASSWORD=Azerty1+
|
||||||
|
- MYSQL_DATABASE=nextcloud
|
||||||
|
- MYSQL_USER=nextcloud
|
||||||
|
|
||||||
|
app:
|
||||||
|
image: nextcloud
|
||||||
|
container_name: app
|
||||||
|
restart: always
|
||||||
|
# ports:
|
||||||
|
# - 8081:80
|
||||||
|
links:
|
||||||
|
- db
|
||||||
|
volumes:
|
||||||
|
- nextcloud:/var/www/html
|
||||||
|
networks:
|
||||||
|
- proxy
|
||||||
|
- nxc
|
||||||
labels:
|
labels:
|
||||||
- "traefik.http.routers.nginx.rule=Host(`my.nginx`)"
|
- "traefik.http.routers.app.rule=Host(`mon.nxc`)"
|
||||||
EOT
|
environment:
|
||||||
docker compose up -d
|
- MYSQL_PASSWORD=Azerty1+
|
||||||
|
- MYSQL_DATABASE=nextcloud
|
||||||
|
- MYSQL_USER=nextcloud
|
||||||
|
- MYSQL_HOST=db
|
||||||
|
'EOT'
|
||||||
|
docker network create proxy
|
||||||
|
docker compose -f traefik.yml up -d
|
||||||
|
docker compose -f nextcloud.yml up -d
|
||||||
ip -br a
|
ip -br a
|
||||||
SHELL
|
SHELL
|
||||||
end
|
end
|
||||||
|
|
81
docker-traefik-nginx/Vagrantfile
vendored
81
docker-traefik-nginx/Vagrantfile
vendored
@ -73,52 +73,45 @@ Vagrant.configure("2") do |config|
|
|||||||
gpasswd -a vagrant docker
|
gpasswd -a vagrant docker
|
||||||
fi
|
fi
|
||||||
mkdir -p docker/traefik && cd docker/traefik
|
mkdir -p docker/traefik && cd docker/traefik
|
||||||
wget https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-linux-amd64
|
mkdir nginx
|
||||||
chmod +x mkcert-v*-linux-amd64
|
echo "my.nginx" > nginx/index.html
|
||||||
cp mkcert-v*-linux-amd64 /usr/local/bin/mkcert
|
mkdir nginx2
|
||||||
mkdir certs && cd certs
|
echo "my.nginx2" > nginx2/index.html
|
||||||
mkcert your-domain.net
|
#cat > docker-compose.yml <<-EOT
|
||||||
cd ..
|
cat > docker-compose.yml <<'EOT'
|
||||||
|
version: '3'
|
||||||
|
|
||||||
cat > docker-compose.yml <<-EOT
|
services:
|
||||||
version: "3.2"
|
reverse-proxy:
|
||||||
traefik:
|
# The official v2 Traefik docker image
|
||||||
image: traefik:latest
|
image: traefik:latest
|
||||||
command:
|
# Enables the web UI and tells Traefik to listen to docker
|
||||||
- --entrypoints.web.address=:80
|
command: --api.insecure=true --providers.docker
|
||||||
- --entrypoints.websecure.address=:443
|
ports:
|
||||||
- --providers.docker=true
|
# The HTTP port
|
||||||
- --providers.file.directory=/etc/traefik/dynamic_conf
|
- "80:80"
|
||||||
- --providers.file.watch=true
|
# The Web UI (enabled by --api.insecure=true)
|
||||||
ports:
|
- "8080:8080"
|
||||||
- 80:80
|
volumes:
|
||||||
- 443:443
|
# So that Traefik can listen to the Docker events
|
||||||
volumes:
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
nginx:
|
||||||
- ./certs/:/certs/:ro
|
# A container that exposes an API to show its IP address
|
||||||
- ./traefik.yml:/etc/traefik/dynamic_conf/conf.yml:ro
|
image: nginx:1.23-alpine
|
||||||
|
volumes:
|
||||||
web:
|
- ./nginx:/usr/share/nginx/html:ro
|
||||||
image: nginx:1.17.8-alpine
|
labels:
|
||||||
labels:
|
- "traefik.http.routers.nginx.rule=Host(`my.nginx`)"
|
||||||
# http with redirection
|
nginx2:
|
||||||
- traefik.http.middlewares.redirect-middleware.redirectscheme.scheme=https
|
# A container that exposes an API to show its IP address
|
||||||
- traefik.http.routers.web-router.entrypoints=web
|
image: nginx:1.23-alpine
|
||||||
- traefik.http.routers.web-router.rule=Host(`your-domain.net`)
|
volumes:
|
||||||
- traefik.http.routers.web-router.middlewares=redirect-middleware
|
- ./nginx2:/usr/share/nginx/html:ro
|
||||||
# https
|
labels:
|
||||||
- traefik.http.routers.websecure-router.entrypoints=websecure
|
- "traefik.http.routers.nginx2.rule=Host(`my.nginx2`)"
|
||||||
- traefik.http.routers.websecure-router.tls=true
|
'EOT'
|
||||||
- traefik.http.routers.websecure-router.rule=Host(`your-domain.net`)
|
|
||||||
EOT
|
|
||||||
cat > mariadb.env <<-EOT
|
|
||||||
tls:
|
|
||||||
certificates:
|
|
||||||
- certFile: /certs/awx.afone.priv.crt
|
|
||||||
keyFile: /certs/awx.afone.priv.key
|
|
||||||
EOT
|
|
||||||
docker compose up -d
|
docker compose up -d
|
||||||
ip -br a
|
ip -br a
|
||||||
SHELL
|
SHELL
|
||||||
end
|
end
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user