Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8f7d290281 | ||
|
|
725945c71e |
@@ -14,38 +14,6 @@ sudo apt-get install -y libnss3-tools
|
|||||||
mkdir certs config
|
mkdir certs config
|
||||||
mkcert -install
|
mkcert -install
|
||||||
mkcert -cert-file certs/local-cert.pem -key-file certs/local-key.pem "mon.nxc" "*.mon.nxc"
|
mkcert -cert-file certs/local-cert.pem -key-file certs/local-key.pem "mon.nxc" "*.mon.nxc"
|
||||||
cat > traefik.yml <<EOT
|
|
||||||
version: '3'
|
|
||||||
|
|
||||||
networks:
|
|
||||||
proxy:
|
|
||||||
external: true
|
|
||||||
|
|
||||||
services:
|
|
||||||
reverse-proxy:
|
|
||||||
# The official v2 Traefik docker image
|
|
||||||
image: traefik:latest
|
|
||||||
container_name: traefik
|
|
||||||
# Enables the web UI and tells Traefik to listen to docker
|
|
||||||
command: --api.insecure=true --providers.docker
|
|
||||||
ports:
|
|
||||||
# The HTTP port
|
|
||||||
- "80:80"
|
|
||||||
- "443:443"
|
|
||||||
# The Web UI (enabled by --api.insecure=true)
|
|
||||||
- "8080:8080"
|
|
||||||
volumes:
|
|
||||||
# So that Traefik can listen to the Docker events
|
|
||||||
- /var/run/docker.sock:/var/run/docker.sock:ro
|
|
||||||
# Map the static configuration into the container
|
|
||||||
- ./config/static.yml:/etc/traefik/traefik.yml:ro
|
|
||||||
# Map the dynamic configuration into the container
|
|
||||||
- ./config/dynamic.yml:/etc/traefik/dynamic.yml:ro
|
|
||||||
# Map the certificats into the container
|
|
||||||
- ./certs:/etc/certs:ro
|
|
||||||
networks:
|
|
||||||
- proxy
|
|
||||||
EOT
|
|
||||||
|
|
||||||
cat > ./config/static.yml <<EOT
|
cat > ./config/static.yml <<EOT
|
||||||
global:
|
global:
|
||||||
@@ -100,22 +68,34 @@ tls:
|
|||||||
EOT
|
EOT
|
||||||
|
|
||||||
|
|
||||||
cat > nextcloud.yml <<EOT
|
cat > compose.yml <<EOT
|
||||||
version: '2'
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
nextcloud:
|
|
||||||
db:
|
|
||||||
|
|
||||||
networks:
|
|
||||||
proxy:
|
|
||||||
external: true
|
|
||||||
nxc:
|
|
||||||
external: false
|
|
||||||
|
|
||||||
services:
|
services:
|
||||||
|
reverse-proxy:
|
||||||
|
# The official V3 Traefik docker image
|
||||||
|
image: traefik:latest
|
||||||
|
container_name: traefik
|
||||||
|
# Enables the web UI and tells Traefik to listen to docker
|
||||||
|
command: --api.insecure=true --providers.docker
|
||||||
|
ports:
|
||||||
|
# The HTTP port
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
# The Web UI (enabled by --api.insecure=true)
|
||||||
|
- "8080:8080"
|
||||||
|
volumes:
|
||||||
|
# So that Traefik can listen to the Docker events
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
|
# Map the static configuration into the container
|
||||||
|
- ./config/static.yml:/etc/traefik/traefik.yml:ro
|
||||||
|
# Map the dynamic configuration into the container
|
||||||
|
- ./config/dynamic.yml:/etc/traefik/dynamic.yml:ro
|
||||||
|
# Map the certificats into the container
|
||||||
|
- ./certs:/etc/certs:ro
|
||||||
|
networks:
|
||||||
|
- proxy
|
||||||
|
|
||||||
db:
|
db:
|
||||||
image: mariadb:10.5
|
image: mariadb
|
||||||
container_name: db
|
container_name: db
|
||||||
restart: always
|
restart: always
|
||||||
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
|
command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
|
||||||
@@ -133,9 +113,6 @@ services:
|
|||||||
image: nextcloud
|
image: nextcloud
|
||||||
container_name: app
|
container_name: app
|
||||||
restart: always
|
restart: always
|
||||||
# ports:
|
|
||||||
# - 8081:80
|
|
||||||
#links:
|
|
||||||
depends_on:
|
depends_on:
|
||||||
- db
|
- db
|
||||||
volumes:
|
volumes:
|
||||||
@@ -145,17 +122,30 @@ services:
|
|||||||
- nxc
|
- nxc
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
- "traefik.http.routers.app.rule=Host(\`mon.nxc\`)"
|
- "traefik.http.routers.app.rule=Host(`mon.nxc`)"
|
||||||
- "traefik.http.routers.app.tls=true"
|
- "traefik.http.routers.app.tls=true"
|
||||||
|
- "traefik.docker.network=proxy"
|
||||||
|
- "traefik.http.routers.app.service=app-service"
|
||||||
|
- "traefik.http.services.app-service.loadbalancer.server.port=80"
|
||||||
environment:
|
environment:
|
||||||
- MYSQL_PASSWORD=Azerty1+
|
- MYSQL_PASSWORD=Azerty1+
|
||||||
- MYSQL_DATABASE=nextcloud
|
- MYSQL_DATABASE=nextcloud
|
||||||
- MYSQL_USER=nextcloud
|
- MYSQL_USER=nextcloud
|
||||||
- MYSQL_HOST=db
|
- MYSQL_HOST=db
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
nextcloud:
|
||||||
|
db:
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
external: true
|
||||||
|
nxc:
|
||||||
|
external: false
|
||||||
|
|
||||||
EOT
|
EOT
|
||||||
|
|
||||||
docker network create proxy
|
docker network create proxy
|
||||||
docker compose -f traefik.yml up -d
|
docker compose up -d
|
||||||
docker compose -f nextcloud.yml up -d
|
|
||||||
ip -br a
|
ip -br a
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
services:
|
services:
|
||||||
payara:
|
payara:
|
||||||
image: payara/server-full:6.2025.9-jdk17
|
image: payara/server-full:6.2025.9-jdk17
|
||||||
|
container_name: payara
|
||||||
ports:
|
ports:
|
||||||
- "8080:8080"
|
- "8080:8080"
|
||||||
- "4848:4848"
|
- "4848:4848"
|
||||||
@@ -15,6 +16,7 @@ services:
|
|||||||
# - db
|
# - db
|
||||||
db:
|
db:
|
||||||
image: mariadb
|
image: mariadb
|
||||||
|
container_name: db
|
||||||
ports:
|
ports:
|
||||||
- "3336:3306"
|
- "3336:3306"
|
||||||
env_file:
|
env_file:
|
||||||
|
|||||||
@@ -71,8 +71,9 @@ INSERT INTO `salarie` (`idSal`, `login`, `mdp`, `estAdmin`) VALUES
|
|||||||
(2, 'mdavid', 'md', 0);
|
(2, 'mdavid', 'md', 0);
|
||||||
COMMIT;
|
COMMIT;
|
||||||
|
|
||||||
|
DROP USER 'adminBDClient'@'%';
|
||||||
CREATE USER 'adminBDClient' IDENTIFIED BY "mdpBDClient";
|
CREATE USER 'adminBDClient' IDENTIFIED BY "mdpBDClient";
|
||||||
GRANT ALL PRIVILEGES ON `bdclient`.* TO 'adminBDClient'@'%' WITH GRANT OPTION;
|
GRANT ALL PRIVILEGES ON bdclient.* TO 'adminBDClient'@'%' WITH GRANT OPTION;
|
||||||
|
|
||||||
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
|
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
|
||||||
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
|
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
|
||||||
|
|||||||
Reference in New Issue
Block a user