70 lines
1.7 KiB
Bash
70 lines
1.7 KiB
Bash
#!/bin/bash
|
|
#
|
|
# Proxy Service
|
|
|
|
PATH=$HOME/.docker/cli-plugins:/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
config_proxy() {
|
|
echo -ne "\n* Configuring /federated/apps/proxy container.."
|
|
spin &
|
|
SPINPID=$!
|
|
|
|
if [ ! -d "/federated/apps/proxy" ]; then
|
|
mkdir -p /federated/apps/proxy/data/root/certs &> /dev/null
|
|
cp /federated/apps/dns/data/etc/letsencrypt/archive/$DOMAIN/fullchain1.pem /federated/apps/proxy/data/root/certs/$DOMAIN.crt
|
|
cp /federated/apps/dns/data/etc/letsencrypt/archive/$DOMAIN/privkey1.pem /federated/apps/proxy/data/root/certs/$DOMAIN.key
|
|
fi
|
|
|
|
DOMAIN_ARRAY=(${DOMAIN//./ })
|
|
DOMAIN_FIRST=${DOMAIN_ARRAY[0]}
|
|
DOMAIN_LAST=${DOMAIN_ARRAY[1]}
|
|
|
|
cat > /federated/apps/proxy/docker-compose.yml <<EOF
|
|
version: '3.7'
|
|
|
|
services:
|
|
proxy:
|
|
image: jwilder/nginx-proxy:\${IMAGE_VERSION}
|
|
container_name: proxy
|
|
hostname: proxy.$DOMAIN
|
|
domainname: $DOMAIN
|
|
restart: always
|
|
networks:
|
|
federated:
|
|
ipv4_address: 172.99.0.15
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
volumes:
|
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
|
- ./data/root/certs:/etc/nginx/certs
|
|
- ./data/custom.conf:/etc/nginx/conf.d/custom.conf:ro
|
|
env_file:
|
|
- ./.env
|
|
|
|
networks:
|
|
federated:
|
|
external: true
|
|
EOF
|
|
|
|
cat > /federated/apps/proxy/.env <<EOF
|
|
IMAGE_VERSION="1.1"
|
|
DEFAULT_HOST=www.$DOMAIN
|
|
EOF
|
|
chmod 600 /federated/apps/proxy/.env
|
|
|
|
cat > /federated/apps/proxy/data/custom.conf <<EOF
|
|
client_max_body_size 64000M;
|
|
EOF
|
|
|
|
kill -9 $SPINPID &> /dev/null
|
|
echo -ne "done."
|
|
}
|
|
start_proxy() {
|
|
# Start service with command to make sure it's up before proceeding
|
|
start_service "proxy" "nc -z 172.99.0.15 443 &> /dev/null"
|
|
|
|
kill -9 $SPINPID &> /dev/null
|
|
echo -ne "done."
|
|
}
|