{"id":30364,"date":"2019-10-31T21:35:08","date_gmt":"2019-10-31T18:35:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux\/"},"modified":"2019-10-31T21:35:08","modified_gmt":"2019-10-31T18:35:08","slug":"nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","title":{"rendered":"Letsencrypti sertifikaatide automaatse saamise seadistamine Dockeris Linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hiljem vahetasin virtuaalset serverit ja pidin k\u00f5ik uuesti seadistama. Eelistaksin, et veebileht oleks saadaval https protokolli kaudu ja et letsencrypt sertifikaadid saadakse ja pikendatakse automaatselt. Seda saab saavutada, kasutades kahte docker pildi: nginx-proxy ja nginx-proxy-companion.<\/p>\n

<\/p>\n

See juhend selgitab, kuidas seadistada veebilehte dockeris, koos proksi, mis automaatselt saab SSL sertifikaadid<\/a>. Kasutatakse virtuaalset serverit CentOS 7.<\/p>\n

<\/a><\/noindex><\/p>\n

Oletan, et server on juba ostetud, seadistatud, sisselogimine toimub v\u00f5tme kaudu, fail2ban on paigaldatud jne.<\/p>\n

<\/p>\n

Esmalt tuleb paigaldada docker.<\/p>\n

<\/p>\n

    \n
  1. Esialgu tuleb paigaldada s\u00f5ltuvused\n
    $ sudo yum install -y yum-utils device-mapper-persistent-data lvm2<\/code><\/pre>\n<\/li>\n
  2. \u00dchendage hoidla\n
    $ sudo yum-config-manager --add-repo https:\/\/download.docker.com\/linux\/centos\/docker-ce.repo<\/code><\/pre>\n<\/li>\n
  3. Siis paigaldage docker community edition\n
    $ sudo yum install docker-ce docker-ce-cli containerd.io<\/code><\/pre>\n<\/li>\n
  4. Lisage docker automaatk\u00e4ivitusse ja k\u00e4ivitage\n
    $ sudo systemctl enable docker\n$ sudo systemctl start docker<\/code><\/pre>\n<\/li>\n
  5. Lisage kasutaja docker gruppi, et saada v\u00f5imalus k\u00e4ivitada docker ilma sudo-ta\n
    $ usermod -aG docker user<\/code><\/pre>\n<\/li>\n<\/ol>\n
    <\/p>\n
    J\u00e4rgmine samm on docker-compose'i \uc124\uce58imine. T\u00f6\u00f6riista saab installida mitmel viisil, kuid mina eelistan seda installida pip-i halduriga ja virtualenv-iga, et mitte s\u00fcsteemi tarbetute paketidega t\u00e4ita.<\/p>\n
    <\/p>\n
      \n
    1. Paigaldada pip\n
      $ sudo yum install python-pip<\/code><\/pre>\n<\/li>\n
    2. Paigaldada virtualenv\n
      $ pip install virtualenv<\/code><\/pre>\n<\/li>\n
    3. Seej\u00e4rel tuleb luua projekti kaust ja see initsialiseerida. K\u00f5ik pakettide haldamiseks vajalikud asjad on kaustas nimega ve.\n
      $ mkdir docker\n$ cd docker\n$ virtualenv ve<\/code><\/pre>\n<\/li>\n
    4. Et alustada virtuaalse keskkonna kasutamist, tuleb projektikaustas k\u00e4ivitada j\u00e4rgmine k\u00e4sk.\n
      $ source ve\/bin\/activate<\/code><\/pre>\n<\/li>\n
    5. Docker-compose'i saab installida.\n
      pip install docker-compose<\/code><\/pre>\n
      <\/p>\n
      Konteinerite omavaheliseks n\u00e4gemiseks loome v\u00f5rgu. Vaikimisi kasutatakse silda (bridge) draiverit.<\/p>\n
      $ docker network create network<\/code><\/pre>\n
      <\/p>\n
      Seej\u00e4rel tuleb seadistada docker-compose, proxy asub kaustas proxy ja testimisleht kaustas test. N\u00e4iteks kasutan domeeninime example.com<\/p>\n
      $ mkdir proxy\n$ mkdir test\n$ touch proxy\/docker-compose.yml\n$ touch test\/docker-compose.yml<\/code><\/pre>\n
      <\/p>\n
      Sisu proxy\/docker-compose.yml<\/strong><\/p>\n
      \n<\/p>\n
      <\/p>\n
      versioon: '3'\n\nv\u00f5rgud:\n  default:\n    v\u00e4line:\n      nimi: network\n\nteenused:\n  nginx-proxy:\n    konteineri_nimi: nginx-proxy\n    pilt: jwilder\/nginx-proxy\n    portid:\n      - 80:80\n      - 443:443\n    mahud:\n      - certs:\/etc\/nginx\/certs\n      - vhost.d:\/etc\/nginx\/vhost.d\n      - html:\/usr\/share\/nginx\/html\n      - \/var\/run\/docker.sock:\/tmp\/docker.sock:ro\n\n  nginx-proxy-letsencrypt:\n    konteineri_nimi: nginx-proxy-letsencrypt\n    pilt: jrcs\/letsencrypt-nginx-proxy-companion\n    mahud:\n      - certs:\/etc\/nginx\/certs\n      - vhost.d:\/etc\/nginx\/vhost.d\n      - html:\/usr\/share\/nginx\/html\n      - \/var\/run\/docker.sock:\/var\/run\/docker.sock:ro\n    keskkond:\n      - NGINX_PROXY_CONTAINER=nginx-proxy\n\nmahud:\n  certs:\n  vhost.d:\n  html:<\/code><\/pre>\n
      <\/p>\n
      Keskkonnamuutuja NGINX_PROXY_CONTAINER<\/strong> on vajalik, et letsencrypt konteiner n\u00e4eks proxy konteinerit. Kaustad \/etc\/nginx\/certs, \/etc\/nginx\/vhost.d ja \/usr\/share\/nginx\/html peavad olema m\u00f5lema konteineri jaoks jagatud. Letsencrypt konteineri n\u00f5uetekohaseks t\u00f6\u00f6ks peab rakendus olema juurdep\u00e4\u00e4setav nii 80. kui 443. pordil.<\/p>\n
      <\/p>\n
      Sisu test\/docker-compose.yml<\/strong><\/p>\n
      <\/p>\n
      versioon: '3'\n\nv\u00f5rgud:\n  default:\n    v\u00e4line:\n      nimi: network\n\nteenused:\n\n  nginx:\n    konteineri_nimi: nginx\n    pilt: nginx:latest\n    keskkond:\n      - VIRTUAL_HOST=example.com\n      - LETSENCRYPT_HOST=example.com\n      - LETSENCRYPT_EMAIL=admin@example.com<\/code><\/pre>\n
      <\/p>\n
      Siin on keskkonnamuutujad vajalikud, et proxy saaks korralikult teen serverist taotlusi ning k\u00fcsib sertifikaati \u00f5ige domeeninime jaoks.<\/p>\n
      <\/p>\n
      J\u00e4\u00e4nud on ainult docker-compose k\u00e4ivitamine<\/p>\n
      <\/p>\n
      $ cd proxy\n$ docker-compose up -d\n$ cd ..\/test\n$ docker-compose up -d<\/code><\/pre>\n<\/p>\n<\/li>\n<\/ol>\n
      Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
      \u041c\u0435\u043d\u044f\u043b \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0437\u0430\u043d\u043e\u0432\u043e. \u042f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e https \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b letsencrypt \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438\u0441\u044c \u0438 \u043f\u0440\u043e\u0434\u043b\u0435\u0432\u0430\u043b\u0438\u0441\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438. \u042d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 docker nginx-proxy \u0438 nginx-proxy-companion. \u042d\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043d\u0430 docker, \u0441 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 CentOS 7. \u042f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30364","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Letsencrypt sertifikaatide automaatse saamise seadistamine Dockeris Linuxis | ProHoster","description":"Vaid hiljuti vahetasin virtuaalserverit ja pidin k\u00f5ik uuesti seadistama. Eelistaksin, et veebileht oleks saadaval https-protokollis ning letsencrypt sertifikaadid saadakse ja pikendatakse automaatselt. Seda saab saavutada, kasutades kahte Docker pildiformaati: nginx-proxy ja nginx-proxy-companion. See on juhend, kuidas seadistada veebilehte Dockeris, koos p\u00f6\u00f6rdproksi, mis automaatselt saab SSL sertifikaate. Kasutatakse virtuaalserverit CentOS 7. Ma","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 letsencrypt \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e docker \u0432 linux | ProHoster","og:description":"\u041c\u0435\u043d\u044f\u043b \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0437\u0430\u043d\u043e\u0432\u043e. \u042f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e https \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b letsencrypt \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438\u0441\u044c \u0438 \u043f\u0440\u043e\u0434\u043b\u0435\u0432\u0430\u043b\u0438\u0441\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438. \u042d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 docker nginx-proxy \u0438 nginx-proxy-companion. \u042d\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043d\u0430 docker, \u0441 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 CentOS 7. \u042f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:08+00:00","article:modified_time":"2019-10-31T18:35:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30364","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 16:20:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:53","updated":"2026-02-08 16:20:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30364"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364\/revisions"}],"predecessor-version":[{"id":157523,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364\/revisions\/157523"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}