Combine example files into one by moving resources to an env file.
This commit is contained in:
@@ -16,6 +16,9 @@ services:
|
|||||||
ports:
|
ports:
|
||||||
- "80:80"
|
- "80:80"
|
||||||
- "443:443"
|
- "443:443"
|
||||||
|
environment:
|
||||||
|
- CPU=$CPU
|
||||||
|
- MEM=$MEM
|
||||||
volumes:
|
volumes:
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt:/etc/nginx/letsencrypt
|
- ../../Volumes/ReverseProxy/letsencrypt:/etc/nginx/letsencrypt
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/nginx/certs
|
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/nginx/certs
|
||||||
@@ -24,13 +27,16 @@ services:
|
|||||||
mode: global
|
mode: global
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
cpus: '0.20'
|
cpus: $CPU
|
||||||
memory: 64M
|
memory: $MEM
|
||||||
|
|
||||||
certbot:
|
certbot:
|
||||||
container_name: rp-certbot
|
container_name: rp-certbot
|
||||||
image: certbot/certbot
|
image: certbot/certbot
|
||||||
restart: always
|
restart: always
|
||||||
|
environment:
|
||||||
|
- CPU_LE=$CPU_LE
|
||||||
|
- MEM_LE=$MEM_LE
|
||||||
volumes:
|
volumes:
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt:/etc/letsencrypt
|
- ../../Volumes/ReverseProxy/letsencrypt:/etc/letsencrypt
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/letsencrypt/nginx
|
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/letsencrypt/nginx
|
||||||
@@ -39,5 +45,5 @@ services:
|
|||||||
mode: global
|
mode: global
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
cpus: '0.10'
|
cpus: $CPU_LE
|
||||||
memory: 32M
|
memory: $MEM_LE
|
||||||
@@ -1,49 +0,0 @@
|
|||||||
# 2022-10-05 Hyperling
|
|
||||||
# Reverse Proxy with LetsEncrypt Certbot.
|
|
||||||
# This is a revised version of these works:
|
|
||||||
# https://phoenixnap.com/kb/docker-nginx-reverse-proxy
|
|
||||||
# https://www.docker.com/blog/how-to-use-the-official-nginx-docker-image/
|
|
||||||
# https://pentacent.medium.com/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71
|
|
||||||
|
|
||||||
services:
|
|
||||||
|
|
||||||
app:
|
|
||||||
container_name: rp-app
|
|
||||||
build:
|
|
||||||
context: ./
|
|
||||||
network: host
|
|
||||||
restart: always
|
|
||||||
ports:
|
|
||||||
- "80:80"
|
|
||||||
- "443:443"
|
|
||||||
volumes:
|
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt:/etc/nginx/letsencrypt
|
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/nginx/certs
|
|
||||||
command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"
|
|
||||||
deploy:
|
|
||||||
mode: global
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
cpus: '1.00'
|
|
||||||
memory: 512M
|
|
||||||
reservations:
|
|
||||||
cpus: '0.25'
|
|
||||||
memory: 128M
|
|
||||||
|
|
||||||
certbot:
|
|
||||||
container_name: rp-certbot
|
|
||||||
image: certbot/certbot
|
|
||||||
restart: always
|
|
||||||
volumes:
|
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt:/etc/letsencrypt
|
|
||||||
- ../../Volumes/ReverseProxy/letsencrypt-certs:/etc/letsencrypt/nginx
|
|
||||||
entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; cp -rL /etc/letsencrypt/live/* /etc/letsencrypt/nginx/; sleep 12h & wait $${!}; done;'"
|
|
||||||
deploy:
|
|
||||||
mode: global
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
cpus: '0.50'
|
|
||||||
memory: 256M
|
|
||||||
reservations:
|
|
||||||
cpus: '0.25'
|
|
||||||
memory: 128M
|
|
||||||
19
Config/ReverseProxy/example.env
Normal file
19
Config/ReverseProxy/example.env
Normal file
@@ -0,0 +1,19 @@
|
|||||||
|
# This file will need copied as `.env` and adjusted as necessary.
|
||||||
|
|
||||||
|
## Docker ##
|
||||||
|
|
||||||
|
COMPOSE_BAKE=true
|
||||||
|
|
||||||
|
## Performance ##
|
||||||
|
|
||||||
|
# Micro Server
|
||||||
|
CPU=0.20
|
||||||
|
MEM=0.10G
|
||||||
|
CPU_LE=0.10
|
||||||
|
MEM_LE=0.05G
|
||||||
|
|
||||||
|
# Capable Server
|
||||||
|
#CPU=1.00
|
||||||
|
#MEM=0.50G
|
||||||
|
#CPU_LE=0.50
|
||||||
|
#MEM_LE=0.25G
|
||||||
Reference in New Issue
Block a user