mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2024-10-31 18:23:12 +01:00
removed server_
This commit is contained in:
parent
7830e1f38e
commit
d0745f3439
@ -82,9 +82,9 @@ docker-compose -p akaunting up -d --force-recreate
|
||||
|
||||
# recover all volumes
|
||||
cd {{path_administrator_scripts}}docker-volume-backup &&
|
||||
bash server_docker-volume-recover.sh akaunting_akaunting-modules ${machine_id:0:64} "$backup_version" &&
|
||||
bash server_docker-volume-recover.sh akaunting_akaunting-data ${machine_id:0:64} "$backup_version" &&
|
||||
bash server_docker-volume-recover.sh akaunting_akaunting-db ${machine_id:0:64} "$backup_version" akaunting-db "$akaunting_db_password" akaunting
|
||||
bash docker-volume-recover.sh akaunting_akaunting-modules ${machine_id:0:64} "$backup_version" &&
|
||||
bash docker-volume-recover.sh akaunting_akaunting-data ${machine_id:0:64} "$backup_version" &&
|
||||
bash docker-volume-recover.sh akaunting_akaunting-db ${machine_id:0:64} "$backup_version" akaunting-db "$akaunting_db_password" akaunting
|
||||
|
||||
```
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: register directory
|
||||
|
@ -1,4 +1,4 @@
|
||||
# Role: server_docker-attendize
|
||||
# Role: docker-attendize
|
||||
|
||||
This Ansible role sets up Attendize, an open-source ticket selling and event management platform.
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -7,13 +7,13 @@
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template:
|
||||
src: roles/server_native-docker-reverse-proxy/templates/domain.conf.j2
|
||||
src: roles/native-docker-reverse-proxy/templates/domain.conf.j2
|
||||
dest: /etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
#- name: configure {{ mail_interface_domain }}.conf
|
||||
# template:
|
||||
# src: roles/server_native-docker-reverse-proxy/templates/domain.conf.j2
|
||||
# src: roles/native-docker-reverse-proxy/templates/domain.conf.j2
|
||||
# dest: /etc/nginx/conf.d/{{ mail_interface_domain }}.conf
|
||||
# vars:
|
||||
# http_port: "{{ mail_interface_http_port }}"
|
||||
|
@ -17,8 +17,8 @@ watch -n 2 "docker ps -a | grep bigbluebutton"
|
||||
## further information
|
||||
- https://github.com/bigbluebutton/docker
|
||||
- https://docs.bigbluebutton.org/greenlight/gl-install.html#setting-bigbluebutton-credentials
|
||||
- https://goneuland.de/big-blue-button-mit-server_docker-und-traefik-installieren/
|
||||
- https://goneuland.de/big-blue-button-mit-docker-und-traefik-installieren/
|
||||
- https://github.com/docker/compose/issues/4799
|
||||
- https://www.cyberciti.biz/faq/linux-command-to-remove-virtual-interfaces-or-network-aliases/
|
||||
- https://www.cyberciti.biz/faq/linux-restart-network-interface/
|
||||
- https://stackoverflow.com/questions/53347951/server_docker-network-not-found
|
||||
- https://stackoverflow.com/questions/53347951/docker-network-not-found
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-elk
|
||||
# role docker-elk
|
||||
|
||||
I decided against using this role for security reasons. I recommend to use another tool if you don't want to pay for keeping your logs save and if you don't want to depend on external servers.
|
||||
|
||||
@ -9,5 +9,5 @@ docker restart elk_logstash_1 && docker restart elk_elasticsearch_1 && docker re
|
||||
|
||||
## see
|
||||
- https://logz.io/blog/elk-stack-on-docker/
|
||||
- https://github.com/kevinveenbirkenbach/server_docker-elk
|
||||
- https://logz.io/blog/server_docker-logging/
|
||||
- https://github.com/kevinveenbirkenbach/docker-elk
|
||||
- https://logz.io/blog/docker-logging/
|
||||
|
@ -1,2 +1,2 @@
|
||||
---
|
||||
docker_elk_compose_path: "/srv/github.com/kevinveenbirkenbach/server_docker-elk/"
|
||||
docker_elk_compose_path: "/srv/github.com/kevinveenbirkenbach/docker-elk/"
|
||||
|
@ -1,5 +1,5 @@
|
||||
---
|
||||
- name: recreate server_docker-elk
|
||||
- name: recreate docker-elk
|
||||
command:
|
||||
cmd: docker-compose up -d --force-recreate
|
||||
chdir: "{{docker_elk_compose_path}}"
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -4,7 +4,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: create elasticsearch-sysctl.conf
|
||||
@ -24,12 +24,12 @@
|
||||
state: directory
|
||||
mode: 0755
|
||||
|
||||
- name: git pull server_docker-elk
|
||||
- name: git pull docker-elk
|
||||
git:
|
||||
repo: "https://github.com/kevinveenbirkenbach/server_docker-elk.git"
|
||||
repo: "https://github.com/kevinveenbirkenbach/docker-elk.git"
|
||||
dest: "{{docker_elk_compose_path}}"
|
||||
update: yes
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
register: git_result
|
||||
ignore_errors: true
|
||||
|
||||
@ -40,20 +40,20 @@
|
||||
|
||||
- name: copy docker-compose.yml
|
||||
template: src=docker-compose.yml.j2 dest={{docker_elk_compose_path}}docker-compose.yml
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
|
||||
- name: copy elasticsearch.yml
|
||||
template: src=elasticsearch.yml.j2 dest={{docker_elk_compose_path}}elasticsearch/config/elasticsearch.yml
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
|
||||
- name: copy kibana.yml
|
||||
template: src=kibana.yml.j2 dest={{docker_elk_compose_path}}kibana/config/kibana.yml
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
|
||||
- name: copy logstash.yml
|
||||
template: src=logstash.yml.j2 dest={{docker_elk_compose_path}}logstash/config/logstash.yml
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
|
||||
- name: copy logstash.conf
|
||||
template: src=logstash.conf.j2 dest={{docker_elk_compose_path}}logstash/pipeline/logstash.conf
|
||||
notify: recreate server_docker-elk
|
||||
notify: recreate docker-elk
|
||||
|
@ -2,7 +2,7 @@
|
||||
## Default Elasticsearch configuration from Elasticsearch base image.
|
||||
## https://github.com/elastic/elasticsearch/blob/master/distribution/docker/src/docker/config/elasticsearch.yml
|
||||
#
|
||||
cluster.name: "server_docker-cluster"
|
||||
cluster.name: "docker-cluster"
|
||||
network.host: 0.0.0.0
|
||||
|
||||
## X-Pack settings
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{docker_compose_path}}"
|
||||
|
@ -19,7 +19,7 @@
|
||||
|
||||
FUNKWHALE_VERSION={{funkwhale_version}}
|
||||
|
||||
# End of server_docker-only configuration
|
||||
# End of docker-only configuration
|
||||
|
||||
# General configuration
|
||||
# ---------------------
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-gitea
|
||||
# role docker-gitea
|
||||
|
||||
## update
|
||||
```bash
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}} https
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{path_docker_compose_folder}}"
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -2,7 +2,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "docker jenkins"
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-joomla
|
||||
# role docker-joomla
|
||||
## delete all data
|
||||
```bash
|
||||
docker stop joomla_application_1; docker rm -f joomla_application_1; docker volume rm -f joomla-data;
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{path_docker_compose_folder}}"
|
||||
|
@ -140,6 +140,6 @@ For instructions on updating your Mailu setup, follow the official [Mailu mainte
|
||||
- [Plesk support article on RoundCube connection issue](https://support.plesk.com/hc/en-us/articles/115001264814-Unable-to-log-into-RoundCube-Connection-to-storage-server-failed)
|
||||
- [Gist by marienfressinaud](https://gist.github.com/marienfressinaud/f284a59b18aad395eb0de2d22836ae6b)
|
||||
|
||||
For more information about this role, visit the [GitHub repository](https://github.com/kevinveenbirkenbach/computer-playbook/tree/master/roles/server_docker-mailu).
|
||||
For more information about this role, visit the [GitHub repository](https://github.com/kevinveenbirkenbach/computer-playbook/tree/master/roles/docker-mailu).
|
||||
|
||||
This README.md was optimized with [Chat-GPT](https://chat.openai.com/share/d1ad5ce7-3aa1-4a14-a959-63393b39374a)
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
- systemd_notifier
|
||||
|
@ -6,7 +6,7 @@
|
||||
- name: configure {{domain}}.conf
|
||||
vars:
|
||||
client_max_body_size: "31M"
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{path_docker_compose_files}}mailu"
|
||||
|
@ -26,7 +26,7 @@ docker exec -it -u root mastodon-web-1 chown -R 991:991 public
|
||||
```
|
||||
|
||||
## further information
|
||||
- https://goneuland.de/mastodon-mit-server_docker-und-traefik-installieren/
|
||||
- https://goneuland.de/mastodon-mit-docker-und-traefik-installieren/
|
||||
- https://gist.github.com/TrillCyborg/84939cd4013ace9960031b803a0590c4
|
||||
- https://www.2daygeek.com/linux-command-check-website-is-up-down-alive/
|
||||
- https://vitobotta.com/2022/11/07/setting-up-a-personal-mastodon-instance/
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -6,7 +6,7 @@ map $http_upgrade $connection_upgrade {
|
||||
server {
|
||||
server_name {{domain}};
|
||||
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
|
||||
keepalive_timeout 70;
|
||||
sendfile on;
|
||||
@ -23,7 +23,7 @@ server {
|
||||
|
||||
add_header Strict-Transport-Security "max-age=31536000";
|
||||
|
||||
{% include 'roles/server_native-docker-reverse-proxy/templates/proxy_pass.conf.j2' %}
|
||||
{% include 'roles/native-docker-reverse-proxy/templates/proxy_pass.conf.j2' %}
|
||||
|
||||
location /api/v1/streaming {
|
||||
proxy_set_header Host $host;
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-mediawiki
|
||||
# role docker-mediawiki
|
||||
## Generate LocalSettings.php
|
||||
Login to the container:
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -2,7 +2,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "docker mediawiki"
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: create data folder
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-nextcloud
|
||||
# role docker-nextcloud
|
||||
|
||||
## precondition
|
||||
|
||||
@ -58,7 +58,7 @@ cd {{path_docker_compose_files}}nextcloud &&
|
||||
docker-compose down &&
|
||||
docker exec -i nextcloud_database_1 mysql -u nextcloud -pPASSWORT nextcloud < "/Backups/$(sha256sum /etc/machine-id | head -c 64)/docker-volume-backup/latest/nextcloud_database/sql/backup.sql" &&
|
||||
cd {{path_administrator_scripts}}docker-volume-backup &&
|
||||
bash ./server_docker-volume-recover.sh "nextcloud_data" "$(sha256sum /etc/machine-id | head -c 64)"
|
||||
bash ./docker-volume-recover.sh "nextcloud_data" "$(sha256sum /etc/machine-id | head -c 64)"
|
||||
```
|
||||
|
||||
## database
|
||||
@ -125,13 +125,13 @@ Until NC24 MariaDB version has to be used.
|
||||
## further information
|
||||
- https://github.com/nextcloud/docker/blob/master/.examples/docker-compose/with-nginx-proxy/mariadb/fpm/docker-compose.yml
|
||||
- https://goneuland.de/nextcloud-upgrade-auf-neue-versionen-mittels-docker/
|
||||
- https://help.nextcloud.com/t/cant-start-nextcloud-because-the-version-of-the-data-is-higher-than-the-server_docker-image-version-and-downgrading-is-not-supported/109438
|
||||
- https://help.nextcloud.com/t/cant-start-nextcloud-because-the-version-of-the-data-is-higher-than-the-docker-image-version-and-downgrading-is-not-supported/109438
|
||||
- https://github.com/nextcloud/docker/issues/1302
|
||||
- https://help.nextcloud.com/t/update-to-22-failed-with-database-error-updated/120682
|
||||
- https://help.nextcloud.com/t/nc-update-to-21-0-0-beta1-exception-database-error/101124/4
|
||||
- https://wolfgang.gassler.org/reset-password-mariadb-mysql-docker/
|
||||
- https://unix.stackexchange.com/questions/478855/ansible-server_docker-container-and-depends-on
|
||||
- https://github.com/gdiepen/server_docker-convenience-scripts
|
||||
- https://unix.stackexchange.com/questions/478855/ansible-docker-container-and-depends-on
|
||||
- https://github.com/gdiepen/docker-convenience-scripts
|
||||
- https://help.nextcloud.com/t/several-issues-after-upgrading-to-nextcloud-21/113118/3
|
||||
- https://forum.openmediavault.org/index.php?thread/31782-server_docker-nextcloud-talk-plugin-and-turnserver/
|
||||
- https://help.nextcloud.com/t/nextcloud-talk-im-server_docker-container-turn-server-auf-server_docker-host-kein-video/84133/10
|
||||
- https://forum.openmediavault.org/index.php?thread/31782-docker-nextcloud-talk-plugin-and-turnserver/
|
||||
- https://help.nextcloud.com/t/nextcloud-talk-im-docker-container-turn-server-auf-docker-host-kein-video/84133/10
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -2,7 +2,7 @@ server
|
||||
{
|
||||
server_name {{domain}};
|
||||
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
|
||||
# Remove X-Powered-By, which is an information leak
|
||||
fastcgi_hide_header X-Powered-By;
|
||||
@ -12,7 +12,7 @@ server
|
||||
client_body_buffer_size 400M;
|
||||
fastcgi_buffers 64 4K;
|
||||
|
||||
{% include 'roles/server_native-docker-reverse-proxy/templates/proxy_pass.conf.j2' %}
|
||||
{% include 'roles/native-docker-reverse-proxy/templates/proxy_pass.conf.j2' %}
|
||||
|
||||
location ^~ /.well-known {
|
||||
rewrite ^/\.well-known/host-meta\.json /public.php?service=host-meta-json last;
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -6,7 +6,7 @@ upstream backend {
|
||||
server {
|
||||
server_name {{domain}};
|
||||
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
|
||||
##
|
||||
# Application
|
||||
|
@ -1,6 +1,6 @@
|
||||
# Pixelfed Docker Server Role
|
||||
|
||||
This README details the steps to manage your Pixelfed instance running in a Docker container. This setup is part of the server_docker-pixelfed role within Kevin Veen-Birkenbach's computer-playbook located at [this GitHub repository](https://github.com/kevinveenbirkenbach/computer-playbook/tree/master/roles/server_docker-pixelfed).
|
||||
This README details the steps to manage your Pixelfed instance running in a Docker container. This setup is part of the docker-pixelfed role within Kevin Veen-Birkenbach's computer-playbook located at [this GitHub repository](https://github.com/kevinveenbirkenbach/computer-playbook/tree/master/roles/docker-pixelfed).
|
||||
|
||||
## Accessing Services
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{docker_compose_path}}"
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -2,6 +2,6 @@
|
||||
|
||||
## further information
|
||||
- https://github.com/p-wojt/roulette-wheel
|
||||
- https://dev.to/ms314006/how-to-package-front-end-projects-into-server_docker-images-and-use-it-with-webpack-go3
|
||||
- https://stackoverflow.com/questions/53178820/dockerfile-to-run-nodejs-static-content-in-server_docker-container
|
||||
- https://dev.to/ms314006/how-to-package-front-end-projects-into-docker-images-and-use-it-with-webpack-go3
|
||||
- https://stackoverflow.com/questions/53178820/dockerfile-to-run-nodejs-static-content-in-docker-container
|
||||
- https://stackoverflow.com/questions/43619644/i-am-getting-an-invalid-host-header-message-when-connecting-to-webpack-dev-ser
|
@ -3,7 +3,7 @@
|
||||
command: certbot certonly --agree-tos --email {{administrator_email}} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{domain}}
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{domain}}.conf
|
||||
notify: restart nginx
|
||||
|
||||
- name: "create {{docker_compose_path}}"
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-wordpress
|
||||
# role docker-wordpress
|
||||
|
||||
## database
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -7,7 +7,7 @@
|
||||
vars:
|
||||
client_max_body_size: "2M"
|
||||
domain: "{{item}}"
|
||||
template: src=roles/server_native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{ item }}.conf
|
||||
template: src=roles/native-docker-reverse-proxy/templates/domain.conf.j2 dest=/etc/nginx/conf.d/{{ item }}.conf
|
||||
loop: "{{domains}}"
|
||||
notify: restart nginx
|
||||
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_docker-yourls
|
||||
# role docker-yourls
|
||||
|
||||
## database
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-docker-reverse-proxy
|
||||
- native-docker-reverse-proxy
|
||||
|
@ -4,7 +4,7 @@
|
||||
|
||||
- name: configure {{domain}}.conf
|
||||
template:
|
||||
src: "roles/server_native-docker-reverse-proxy/templates/domain.conf.j2"
|
||||
src: "roles/native-docker-reverse-proxy/templates/domain.conf.j2"
|
||||
dest: "/etc/nginx/conf.d/{{domain}}.conf"
|
||||
notify: restart nginx
|
||||
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-backups-consumer
|
||||
# role native-backups-consumer
|
||||
|
||||
## goal
|
||||
This script allows to pull backups from a remote server.
|
||||
|
@ -1,4 +1,4 @@
|
||||
dependencies:
|
||||
- server_native-git
|
||||
- native-git
|
||||
- systemd_notifier
|
||||
- independent_backups-cleanup-timer
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-sshd
|
||||
- native-sshd
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-backups-provider-user
|
||||
# role native-backups-provider-user
|
||||
User for backups
|
||||
|
||||
## todo
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-backups-provider-host
|
||||
# role native-backups-provider-host
|
||||
|
||||
## todo
|
||||
- add full system backup
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-backups-provider-user
|
||||
- native-backups-provider-user
|
||||
- independent_backups-cleanup-timer
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-nginx
|
||||
- native-nginx
|
||||
- systemd_notifier
|
||||
|
@ -1,2 +1,2 @@
|
||||
# server_native-docker-compose-restart-unhealthy
|
||||
# native-docker-compose-restart-unhealthy
|
||||
docker-compose restart for containers which are unhealty or excited
|
@ -1 +1 @@
|
||||
docker_health_check_folder: "{{path_administrator_scripts}}server_docker-health-check/"
|
||||
docker_health_check_folder: "{{path_administrator_scripts}}docker-health-check/"
|
@ -1,4 +1,4 @@
|
||||
# role server_native-docker-reverse-proxy
|
||||
# role native-docker-reverse-proxy
|
||||
|
||||
Uses nginx as an [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) for local docker applications.
|
||||
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-docker
|
||||
- server_native-https-server
|
||||
- native-docker
|
||||
- native-https-server
|
||||
|
@ -6,7 +6,7 @@ server
|
||||
client_max_body_size {{ client_max_body_size }};
|
||||
{% endif %}
|
||||
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
|
||||
{% include 'proxy_pass.conf.j2' %}
|
||||
|
||||
|
@ -1,4 +1,4 @@
|
||||
dependencies:
|
||||
- server_native-git
|
||||
- server_native-backups-provider
|
||||
- native-git
|
||||
- native-backups-provider
|
||||
- systemd_notifier
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-docker
|
||||
# role native-docker
|
||||
|
||||
## maintanance
|
||||
|
||||
@ -16,4 +16,4 @@
|
||||
- https://forums.docker.com/t/mysql-slow-performance-in-docker/37179/21
|
||||
|
||||
## see
|
||||
- https://stackoverflow.com/questions/37599128/server_docker-how-do-you-disable-auto-restart-on-a-container
|
||||
- https://stackoverflow.com/questions/37599128/docker-how-do-you-disable-auto-restart-on-a-container
|
||||
|
@ -1,5 +1,5 @@
|
||||
dependencies:
|
||||
- server_native-docker-volume-backup
|
||||
- server_user-administrator
|
||||
- server_native-docker-health-check
|
||||
- server_native-docker-compose-restart-unhealthy
|
||||
- native-docker-volume-backup
|
||||
- user-administrator
|
||||
- native-docker-health-check
|
||||
- native-docker-compose-restart-unhealthy
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-https-server
|
||||
- server_native-git
|
||||
- native-https-server
|
||||
- native-git
|
||||
|
@ -3,7 +3,7 @@ server
|
||||
{
|
||||
server_name {{domain}};
|
||||
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
|
||||
charset utf-8;
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-https-server
|
||||
- native-https-server
|
||||
|
@ -1,5 +1,5 @@
|
||||
server {
|
||||
server_name {{domain}};
|
||||
{% include 'roles/server_native-letsencrypt/templates/ssl_header.j2' %}
|
||||
{% include 'roles/native-letsencrypt/templates/ssl_header.j2' %}
|
||||
return 301 https://{{target_domain}}$request_uri;
|
||||
}
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-nginx
|
||||
- server_native-letsencrypt
|
||||
- native-nginx
|
||||
- native-letsencrypt
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-journalctl
|
||||
# role native-journalctl
|
||||
|
||||
# live monitoring
|
||||
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-journalctl-health-check
|
||||
- native-journalctl-health-check
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_native-certbot-nginx
|
||||
- native-certbot-nginx
|
||||
|
@ -1,4 +1,4 @@
|
||||
# role server_native-nginx
|
||||
# role native-nginx
|
||||
|
||||
## debug
|
||||
```bash
|
||||
@ -11,4 +11,4 @@ journalctl -f -u nginx
|
||||
- https://www.nginx.com/blog/performance-tuning-tips-tricks/
|
||||
- https://medium.com/pixelpoint/best-practices-for-cache-control-settings-for-your-website-ff262b38c5a2
|
||||
- https://www.nginx.com/blog/nginx-caching-guide/
|
||||
- https://meta.discourse.org/t/using-nginx-as-proxy-server-is-very-slow-but-it-is-very-fast-if-using-nginx-in-server_docker-why/168972
|
||||
- https://meta.discourse.org/t/using-nginx-as-proxy-server-is-very-slow-but-it-is-very-fast-if-using-nginx-in-docker-why/168972
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_user-administrator
|
||||
- user-administrator
|
||||
|
@ -1,7 +1,7 @@
|
||||
# role server_native-sshd
|
||||
# role native-sshd
|
||||
## dependencies
|
||||
This role depends on that a well configured user administrator exist.
|
||||
For this reason this role depends on the role server_user-administrator.
|
||||
For this reason this role depends on the role user-administrator.
|
||||
A wrong configuration of this role can lead to an lockout of the system which just will be reversal via chroot.
|
||||
|
||||
## PAM
|
||||
|
@ -1,2 +1,2 @@
|
||||
dependencies:
|
||||
- server_user-administrator
|
||||
- user-administrator
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_user-alarm
|
||||
- server_native-sshd
|
||||
- user-alarm
|
||||
- native-sshd
|
||||
|
@ -1,3 +1,3 @@
|
||||
dependencies:
|
||||
- server_native-sudo
|
||||
- native-sudo
|
||||
- independent_user-administrator
|
||||
|
Loading…
Reference in New Issue
Block a user