🥇 Ka hoʻonohonoho ʻana i ka loaʻa ʻana o nā palapala hōʻoia letsencrypt me ka hoʻohana ʻana i ka docker ma linux

Ua hoʻololi hou wau i ka server virtual, a pono e hoʻonohonoho hou i nā mea āpau. Makemake au e ʻike ʻia ka pūnaewele ma o https a e loaʻa nā palapala hōʻoia letsencrypt a hoʻololi hou ʻia. Hiki ke hoʻokō ʻia kēia ma ka hoʻohana ʻana i ʻelua kiʻi docker nginx-proxy a me nginx-proxy-companion.

He alakaʻi kēia i ka hoʻonohonoho ʻana i kahi pūnaewele ma Docker, me kahi mea koho e loaʻa koke i nā palapala SSL. Hoʻohana ʻia ka kikowaena kikowaena CentOS 7.

Manaʻo wau ua kūʻai ʻia ke kikowaena, hoʻonohonoho ʻia, hoʻopaʻa ʻia me ka hoʻohana ʻana i kahi kī, hoʻokomo ʻia ʻo fail2ban, etc.

Pono mua ʻoe e hoʻokomo i ka docker.

Pono mua ʻoe e hoʻokomo i nā dependencies

$ sudo yum install -y yum-utils  device-mapper-persistent-data lvm2

Hoʻohui waihona

$ sudo yum-config-manager  --add-repo  https://download.docker.com/linux/centos/docker-ce.repo

A laila e hoʻokomo i ka paʻi kaiaulu docker

$ sudo yum install docker-ce docker-ce-cli containerd.io

Hoʻohui i ka docker e hoʻomaka a holo

$ sudo systemctl enable docker
$ sudo systemctl start docker

Hoʻohui i kahi mea hoʻohana i ka hui docker e hiki ke holo docker me ka ʻole sudo
```
$ usermod -aG docker user
```

ʻO ka hana aʻe e hoʻokomo i ka docker-compose. Hiki ke hoʻokomo ʻia ka pono ma nā ʻano he nui, akā makemake wau e hoʻokomo ma o ka pip manager a me virtualenv, i ʻole e hoʻopili i ka ʻōnaehana me nā pūʻulu pono ʻole.

E hoʻouka i ka pip
```
$ sudo yum install python-pip
```
E hoʻouka i ka virtualenv
```
$ pip install virtualenv
```
A laila pono ʻoe e hana i kahi waihona me ka papahana a hoʻomaka. ʻO ka waihona me nā mea a pau āu e pono ai e hoʻokele i nā pūʻolo e kapa ʻia ʻo ve.
```
$ mkdir docker
$ cd docker
$ virtualenv ve
```
No ka hoʻomaka ʻana i ka hoʻohana ʻana i ke kaiapuni virtual, pono ʻoe e holo i kēia kauoha ma ka waihona papahana.
```
$ source ve/bin/activate
```

Hiki iā ʻoe ke hoʻouka i ka docker-compose.

pip install docker-compose

I mea e ʻike ai nā pahu i kekahi i kekahi, e hana mākou i kahi pūnaewele. Ma ka maʻamau, hoʻohana ʻia ka mea hoʻokele alahaka.

$ docker network create network

A laila pono ʻoe e hoʻonohonoho i ka docker-compose, aia ka mea koho i ka waihona proxy, aia ka pae hoʻāʻo ma ka waihona hōʻike. No ka laʻana, ke hoʻohana nei au i ka inoa domain example.com

$ mkdir proxy
$ mkdir test
$ touch proxy/docker-compose.yml
$ touch test/docker-compose.yml

ʻIke maʻiʻo proxy/docker-compose.yml

version: '3'

networks:
  default:
    external:
      name: network

services:
  nginx-proxy:
    container_name: nginx-proxy
    image: jwilder/nginx-proxy
    ports:
      - 80:80
      - 443:443
    volumes:
      - certs:/etc/nginx/certs
      - vhost.d:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro

  nginx-proxy-letsencrypt:
    container_name: nginx-proxy-letsencrypt
    image: jrcs/letsencrypt-nginx-proxy-companion
    volumes: 
      - certs:/etc/nginx/certs
      - vhost.d:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - NGINX_PROXY_CONTAINER=nginx-proxy

volumes:
  certs:
  vhost.d:
  html:

Hoʻololi kaiapuni NGINX_PROXY_CONTAINER pono no ka ipu letsencrypt e ike i ka ipu koho. Pono nā waihona /etc/nginx/certs /etc/nginx/vhost.d a me /usr/share/nginx/html e nā pahu ʻelua. I mea e hana pono ai ka ipu letsencrypt, pono ke komo i ka palapala noi ma ke awa 80 a me 443.

ʻIke maʻiʻo hoʻāʻo/docker-compose.yml

version: '3'

networks:
  default:
    external:
      name: network

services:

  nginx:
    container_name: nginx
    image: nginx:latest
    environment:
      - VIRTUAL_HOST=example.com
      - LETSENCRYPT_HOST=example.com
      - [email protected]

Maʻaneʻi, pono nā ʻano hoʻololi kaiapuni i hiki i ka mea koho ke hoʻokō pono i ka noi i ke kikowaena a noi i kahi palapala no ka inoa kikowaena pololei.

ʻO nā mea a pau i koe e holo docker-compose

$ cd proxy
$ docker-compose up -d
$ cd ../test
$ docker-compose up -d

Source: www.habr.com

Hoʻonohonoho i ka loaʻa ʻana o nā palapala letsencrypt me ka hoʻohana ʻana i ka docker ma linux

Pākuʻi i ka manaʻo hoʻopuka ana pane