{"id":30364,"date":"2019-10-31T21:35:08","date_gmt":"2019-10-31T18:35:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux\/"},"modified":"2019-10-31T21:35:08","modified_gmt":"2019-10-31T18:35:08","slug":"nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","title":{"rendered":"Letsencrypti sertifika automaatse hankimise seadistamine docker'i abil linuxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vahetasin hiljuti virtuaalservi ja pidin k\u00f5ik seaded uuesti \u00fcles seadma. Eelistaksin, et veebisait oleks saadaval https kaudu ja letsencrypti sertifikaadid saaks automaatselt hankida ja pikendada. Seda on v\u00f5imalik saavutada, kasutades kahte docker'i pilti nginx-proxy ja nginx-proxy-companion.<\/p>\n

<\/p>\n

See juhend n\u00e4itab, kuidas seadistada veebisait docker'is, kasutades proksi, mis automaatselt saadab SSL sertifikaadid<\/a>. Kasutatakse virtuaalserverit CentOS 7.<\/p>\n

<\/a><\/noindex><\/p>\n

Eeldan, et server on juba ostetud, seadistatud, ja sisse logimine toimub v\u00f5tme abil, fail2ban on installitud jne.<\/p>\n

<\/p>\n

Esmalt tuleb installida docker.<\/p>\n

<\/p>\n

    \n
  1. Esmalt tuleb installida s\u00f5ltuvused\n
    $ sudo yum install -y yum-utils device-mapper-persistent-data lvm2<\/code><\/pre>\n<\/li>\n
  2. Lisa repository\n
    $ sudo yum-config-manager --add-repo https:\/\/download.docker.com\/linux\/centos\/docker-ce.repo<\/code><\/pre>\n<\/li>\n
  3. Seej\u00e4rel installige docker community edition\n
    $ sudo yum install docker-ce docker-ce-cli containerd.io<\/code><\/pre>\n<\/li>\n
  4. Lisa docker autoload'i ja k\u00e4ivita see\n
    $ sudo systemctl enable docker\n$ sudo systemctl start docker<\/code><\/pre>\n<\/li>\n
  5. Lisa kasutaja docker gruppi, et saada v\u00f5imalus k\u00e4ivitada docker ilma sudo't kasutamata\n
    $ usermod -aG docker user<\/code><\/pre>\n<\/li>\n<\/ol>\n
    <\/p>\n
    J\u00e4rgmine samm on docker-compose'i installimine. T\u00f6\u00f6riista saab installida mitmel moel, kuid eelistaksin seda installida pip manageri ja virtualenv'i abil, et mitte s\u00fcsteemi tarbetute pakettidega ummistada.<\/p>\n
    <\/p>\n
      \n
    1. Installige pip\n
      $ sudo yum install python-pip<\/code><\/pre>\n<\/li>\n
    2. Installige virtualenv\n
      $ pip install virtualenv<\/code><\/pre>\n<\/li>\n
    3. Seej\u00e4rel tuleb luua projektikaust ja see initsialiseerida. K\u00f5ik vajalik pakettide haldamiseks olev kaust kannab nime ve.\n
      $ mkdir docker\n$ cd docker\n$ virtualenv ve<\/code><\/pre>\n<\/li>\n
    4. Et hakata virtuaalsest keskkonnast kasutama, tuleb projekti kaustas k\u00e4ivitada j\u00e4rgmine k\u00e4sk.\n
      $ source ve\/bin\/activate<\/code><\/pre>\n<\/li>\n
    5. N\u00fc\u00fcd saab installida docker-compose'i.\n
      pip install docker-compose<\/code><\/pre>\n
      <\/p>\n
      Et konteinerid \u00fcksteist n\u00e4eksid, loome v\u00f5rgu. Vaikimisi kasutatakse silla draiverit.<\/p>\n
      $ docker network create network<\/code><\/pre>\n
      <\/p>\n
      Seej\u00e4rel tuleb seadistada docker-compose, proksi asub kaustas proxy, test veebisait kaustas test. N\u00e4iteks kasutan domeeninime example.com<\/p>\n
      $ mkdir proxy\n$ mkdir test\n$ touch proxy\/docker-compose.yml\n$ touch test\/docker-compose.yml<\/code><\/pre>\n
      <\/p>\n
      Sisu proxy\/docker-compose.yml<\/strong><\/p>\n
      \n<\/p>\n
      <\/p>\n
      versioon: '3'\n\nv\u00f5rgud:\n  vaikimisi:\n    v\u00e4line:\n      nimi: v\u00f5rk\n\nteenused:\n  nginx-proxy:\n    konteineri_nimi: nginx-proxy\n    pilt: jwilder\/nginx-proxy\n    sadamad:\n      - 80:80\n      - 443:443\n    mahutid:\n      - certs:\/etc\/nginx\/certs\n      - vhost.d:\/etc\/nginx\/vhost.d\n      - html:\/usr\/share\/nginx\/html\n      - \/var\/run\/docker.sock:\/tmp\/docker.sock:ro\n\n  nginx-proxy-letsencrypt:\n    konteineri_nimi: nginx-proxy-letsencrypt\n    pilt: jrcs\/letsencrypt-nginx-proxy-companion\n    mahutid: \n      - certs:\/etc\/nginx\/certs\n      - vhost.d:\/etc\/nginx\/vhost.d\n      - html:\/usr\/share\/nginx\/html\n      - \/var\/run\/docker.sock:\/var\/run\/docker.sock:ro\n    keskkond:\n      - NGINX_PROXY_CONTAINER=nginx-proxy\n\nmahutid:\n  certs:\n  vhost.d:\n  html:<\/code><\/pre>\n
      <\/p>\n
      Keskkonnamuutuja NGINX_PROXY_CONTAINER<\/strong> on vajalik, et letsencrypt konteiner n\u00e4eks proxy konteinerit. Kaustad \/etc\/nginx\/certs, \/etc\/nginx\/vhost.d ja \/usr\/share\/nginx\/html peavad olema jagatud m\u00f5lema konteineri vahel. Letsencrypt konteineri korrektseks t\u00f6\u00f6ks peab rakendus olema juurdep\u00e4\u00e4setav nii sadamas 80 kui 443.<\/p>\n
      <\/p>\n
      Sisu test\/docker-compose.yml<\/strong><\/p>\n
      <\/p>\n
      versioon: '3'\n\nv\u00f5rgud:\n  vaikimisi:\n    v\u00e4line:\n      nimi: v\u00f5rk\n\nteenused:\n\n  nginx:\n    konteineri_nimi: nginx\n    pilt: nginx:latest\n    keskkond:\n      - VIRTUAL_HOST=example.com\n      - LETSENCRYPT_HOST=example.com\n      - LETSENCRYPT_EMAIL=admin@example.com<\/code><\/pre>\n
      <\/p>\n
      Siin on keskkonnamuutujad vajalikud, et proxy saaks \u00f5igesti t\u00f6\u00f6tlema p\u00e4ringut serverile ja k\u00fcsida sertifikaati \u00f5ige domeeninime jaoks.<\/p>\n
      <\/p>\n
      J\u00e4\u00e4nud on ainult k\u00e4ivitada docker-compose<\/p>\n
      <\/p>\n
      $ cd proxy\n$ docker-compose up -d\n$ cd ..\/test\n$ docker-compose up -d<\/code><\/pre>\n<\/p>\n<\/li>\n<\/ol>\n
      Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
      \u041c\u0435\u043d\u044f\u043b \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0437\u0430\u043d\u043e\u0432\u043e. \u042f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e https \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b letsencrypt \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438\u0441\u044c \u0438 \u043f\u0440\u043e\u0434\u043b\u0435\u0432\u0430\u043b\u0438\u0441\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438. \u042d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 docker nginx-proxy \u0438 nginx-proxy-companion. \u042d\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043d\u0430 docker, \u0441 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 CentOS 7. \u042f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30364","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Letsencrypt sertifikaatide automaatse saamise seadistamine dockeriga linuxis | ProHoster","description":"Vahetasin hiljuti virtuaalset serverit ja pidin k\u00f5ik uuesti seadistama. Eelistaksin, et veebileht oleks juurdep\u00e4\u00e4setav \u00fcle https ja letsencrypt sertifikaadid saadakse ja pikendatakse automaatselt.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 letsencrypt \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e docker \u0432 linux | ProHoster","og:description":"\u041c\u0435\u043d\u044f\u043b \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0437\u0430\u043d\u043e\u0432\u043e. \u042f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e https \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b letsencrypt \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438\u0441\u044c \u0438 \u043f\u0440\u043e\u0434\u043b\u0435\u0432\u0430\u043b\u0438\u0441\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/nastrojka-avtomaticheskogo-polucheniya-sertifikatov-letsencrypt-s-pomoshhyu-docker-v-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:08+00:00","article:modified_time":"2019-10-31T18:35:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30364","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 16:20:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:53","updated":"2026-02-08 16:20:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30364"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364\/revisions"}],"predecessor-version":[{"id":157523,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30364\/revisions\/157523"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}