sevenhill/QSfera
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adapt formulation for traefik

Browse Source
This commit is contained in:
Jan Müller
2020-10-12 15:28:23 +02:00
parent 9428c3e4b4
commit 930e120c45
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/ocis/deployment/ocis_traefik.md
+7 -6
View File
@@ -15,14 +15,13 @@ geekdocFilePath: ocis_traefik.md
## Overview ## Overview
ocis running on a hcloud node behind traefik as reverse proxy ocis running on a hcloud node behind traefik as reverse proxy
* Cloudflare DNS is resolving the domain * Cloudflare DNS is resolving the domain
* Letsencrypt is providing a valid ssl certificate for the domain * Letsencrypt provides a ssl certificate for the domain
* Traefik docker container terminates ssl and forwards http requests to ocis * Traefik docker container terminates ssl and forwards http requests to ocis
* ocis docker container serves owncloud backend and delivers phoenix client
## Node ## Node
### Requirements ### Requirements
* Server running Ubuntu 20.04 is public availible with a static ip address * Server running Ubuntu 20.04 is public availible with an static ip address
* An A-record for domain is pointing on the servers ip address * An A-record for domain is pointing on the servers ip address
* Create user `$sudo adduser username` * Create user `$sudo adduser username`
* Add user to sudo group `$sudo usermod -aG sudo username` * Add user to sudo group `$sudo usermod -aG sudo username`
@@ -67,10 +66,10 @@ A folder for letsencypt to store the certificate needs to be created
`$ mkdir ~/letsencrypt` `$ mkdir ~/letsencrypt`
This folder is bind to the docker container and the certificate is persistently stored into it. This folder is bind to the docker container and the certificate is persistently stored into it.
In this example, ssl is terminated from traefik and inside of the docker network, the services are comunicating via http. For this `PROXY_TLS: "false"` as environment parameter for ocis has to be set. In this example, ssl is terminated from traefik while inside of the docker network the services are comunicating via http. For this `PROXY_TLS: "false"` as environment parameter for ocis has to be set.
For ocis to work properly it's neccesary to provide one config file. For ocis to work properly it's neccesary to provide one config file.
Changes need to be done in identifier-registration.yml to match your domain Change identifier-registration.yml to match your domain.
``` ```
--- ---
@@ -90,7 +89,9 @@ clients:
- http://your.domain.com - http://your.domain.com
- https://your.domain.com - https://your.domain.com
``` ```
To provide the file to ocis container the following two lines are needed in the compose file.
To make it availible for ocis inside of the container, `config` hast to be mounted as volume.
``` ```
... ...
volumes: volumes: