Initial server setup configuration
This commit is contained in:
RZ_MINIX\rober
parent
1062898c73
commit
42b03fd03a
16
.gitignore
vendored
Normal file
16
.gitignore
vendored
Normal file
@ -0,0 +1,16 @@
|
|||||||
|
# RabbitMQ data files
|
||||||
|
rabbitmq/data/
|
||||||
|
rabbitmq/logs/
|
||||||
|
|
||||||
|
# Traefik temporary files
|
||||||
|
traefik/*~*
|
||||||
|
traefik/AEEB2D~O
|
||||||
|
|
||||||
|
# Any temporary/lock files
|
||||||
|
*~*
|
||||||
|
*.tmp
|
||||||
|
*.lock
|
||||||
|
|
||||||
|
# Log files
|
||||||
|
*.log
|
||||||
|
logs/
|
||||||
173
docker-compose.yml
Normal file
173
docker-compose.yml
Normal file
@ -0,0 +1,173 @@
|
|||||||
|
networks:
|
||||||
|
traefik-public:
|
||||||
|
driver: bridge
|
||||||
|
|
||||||
|
services:
|
||||||
|
traefik:
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
|
||||||
|
image: traefik:latest
|
||||||
|
restart: always
|
||||||
|
command:
|
||||||
|
- "--api.dashboard=true"
|
||||||
|
- "--api.insecure=false"
|
||||||
|
- "--providers.docker=true"
|
||||||
|
- "--providers.docker.exposedbydefault=false"
|
||||||
|
- "--providers.file.directory=/etc/traefik"
|
||||||
|
- "--providers.file.watch=true"
|
||||||
|
- "--entrypoints.web.address=:80"
|
||||||
|
- "--entrypoints.websecure.address=:443"
|
||||||
|
- "--entrypoints.websecure.http.tls=true"
|
||||||
|
- "--entrypoints.websecure.http.tls.certresolver=letsencrypt"
|
||||||
|
- "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
|
||||||
|
- "--certificatesresolvers.letsencrypt.acme.email=robert@wellnuo.com"
|
||||||
|
- "--certificatesresolvers.letsencrypt.acme.storage=/etc/traefik/acme.json"
|
||||||
|
- "--api.dashboard=true"
|
||||||
|
- "--api.insecure=true"
|
||||||
|
- "--entrypoints.amqp.address=:5672"
|
||||||
|
- "--log.level=DEBUG"
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
|
- "443:443"
|
||||||
|
- "8080:8080" # Add this line for dashboard internal access
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock:ro
|
||||||
|
- ./traefik/config:/etc/traefik
|
||||||
|
- ./traefik/acme.json:/etc/traefik/acme.json
|
||||||
|
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
# Dashboard
|
||||||
|
- "traefik.http.routers.dashboard.rule=Host(`traefik.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.dashboard.service=api@internal"
|
||||||
|
- "traefik.http.routers.dashboard.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.dashboard.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.routers.dashboard.middlewares=auth"
|
||||||
|
- "traefik.http.middlewares.auth.basicauth.users=admin:$$apr1$$mG0yHveI$$y2hSROLHtMbuWFK4F.p2c1"
|
||||||
|
|
||||||
|
nginx:
|
||||||
|
build:
|
||||||
|
context: ./nginx
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
volumes:
|
||||||
|
- /home/ubuntu/www:/usr/share/nginx/html
|
||||||
|
- /mnt/data/well_tests:/usr/share/nginx/html/well_tests
|
||||||
|
- /mnt/data/shared:/usr/share/nginx/html/shared
|
||||||
|
- /home/ubuntu/server-setup/well_mob_pwa/build:/usr/share/nginx/html/react
|
||||||
|
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
||||||
|
- ./nginx/conf.d:/etc/nginx/conf.d:ro
|
||||||
|
- ./nginx/.htpasswd:/etc/nginx/.htpasswd:ro
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
# Main website
|
||||||
|
- "traefik.http.routers.nginx-web.rule=Host(`eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.nginx-web.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.nginx-web.tls.certresolver=letsencrypt"
|
||||||
|
# React app
|
||||||
|
- "traefik.http.routers.nginx-react.rule=Host(`react.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.nginx-react.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.nginx-react.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.middlewares.security-headers.headers.stsSeconds=31536000"
|
||||||
|
- "traefik.http.middlewares.security-headers.headers.forceSTSHeader=true"
|
||||||
|
- "traefik.http.routers.nginx-web.middlewares=security-headers"
|
||||||
|
- "traefik.http.routers.nginx-react.middlewares=security-headers"
|
||||||
|
- "traefik.http.services.nginx-react.loadbalancer.server.port=80"
|
||||||
|
|
||||||
|
rabbitmq:
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
user: "999:65534"
|
||||||
|
image: rabbitmq:3.13-management
|
||||||
|
restart: always
|
||||||
|
hostname: "rabbitmq" # Add this line
|
||||||
|
environment:
|
||||||
|
- RABBITMQ_DEFAULT_USER=admin
|
||||||
|
- RABBITMQ_DEFAULT_PASS=Cbx696969!
|
||||||
|
- RABBITMQ_NODENAME=rabbit@rabbitmq # Add this line
|
||||||
|
- RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS=-rabbit log_levels [{connection,error}]
|
||||||
|
- RABBITMQ_MNESIA_DIR=/var/lib/rabbitmq/mnesia
|
||||||
|
volumes:
|
||||||
|
- /mnt/data/rabbitmq:/var/lib/rabbitmq
|
||||||
|
|
||||||
|
ports:
|
||||||
|
- "5672:5672" # AMQP port
|
||||||
|
- "15672:15672" # Management UI
|
||||||
|
expose:
|
||||||
|
- 5672
|
||||||
|
- 15672
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.rabbitmq.rule=Host(`rabbitmq.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.rabbitmq.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.rabbitmq.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.services.rabbitmq.loadbalancer.server.port=15672"
|
||||||
|
|
||||||
|
|
||||||
|
minio:
|
||||||
|
image: minio/minio:latest
|
||||||
|
restart: always
|
||||||
|
command: server /data --console-address ":9001" --address ":9000"
|
||||||
|
environment:
|
||||||
|
# Admin credentials for console login
|
||||||
|
- MINIO_ROOT_USER=admin
|
||||||
|
- MINIO_ROOT_PASSWORD=Cbx696969!
|
||||||
|
# Access keys for API access
|
||||||
|
- MINIO_ACCESS_KEY=well_pipe
|
||||||
|
- MINIO_SECRET_KEY=WellNuo_2024
|
||||||
|
# Optional: Force all credentials to be set before starting
|
||||||
|
- MINIO_SITE_REGION=us-east-1
|
||||||
|
- MINIO_BROWSER_REDIRECT_URL=https://minio-console.eluxnetworks.net
|
||||||
|
ports:
|
||||||
|
- "9000:9000"
|
||||||
|
- "9001:9001" # Adding explicit port mapping for debugging
|
||||||
|
volumes:
|
||||||
|
- /mnt/data/minio:/data
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
# API Service
|
||||||
|
- "traefik.http.routers.minio-api.rule=Host(`minio.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.minio-api.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.minio-api.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.services.minio-api-service.loadbalancer.server.port=9000"
|
||||||
|
- "traefik.http.routers.minio-api.service=minio-api-service"
|
||||||
|
|
||||||
|
# Console Service
|
||||||
|
- "traefik.http.routers.minio-console.rule=Host(`minio-console.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.minio-console.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.minio-console.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.services.minio-console-service.loadbalancer.server.port=9001"
|
||||||
|
- "traefik.http.routers.minio-console.service=minio-console-service"
|
||||||
|
|
||||||
|
registry:
|
||||||
|
image: registry:latest
|
||||||
|
restart: always
|
||||||
|
ports:
|
||||||
|
- "5000:5000"
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=true"
|
||||||
|
- "traefik.http.routers.registry.rule=Host(`repo.eluxnetworks.net`)"
|
||||||
|
- "traefik.http.routers.registry.entrypoints=websecure"
|
||||||
|
- "traefik.http.routers.registry.tls.certresolver=letsencrypt"
|
||||||
|
- "traefik.http.services.registry.loadbalancer.server.port=5000"
|
||||||
|
|
||||||
|
redis:
|
||||||
|
image: redis:alpine
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
- traefik-public
|
||||||
|
volumes:
|
||||||
|
- /mnt/data/redis:/data
|
||||||
|
ports:
|
||||||
|
- "6379:6379"
|
||||||
|
command: redis-server --appendonly yes
|
||||||
|
labels:
|
||||||
|
- "traefik.enable=false" # No need to expose Redis to the internet
|
||||||
38
rabbitmq/definitions.json
Normal file
38
rabbitmq/definitions.json
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
{
|
||||||
|
"users": [
|
||||||
|
{
|
||||||
|
"name": "admin",
|
||||||
|
"password_hash": "YX91m9ZBhL8oXzpxcrYtVAOv4vgTDfS0YCCYJA1UDPPbNJ+m",
|
||||||
|
"hashing_algorithm": "rabbit_password_hashing_sha256",
|
||||||
|
"tags": ["administrator"]
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"name": "well_pipe",
|
||||||
|
"password_hash": "AzdMI/4joetKPS2J5AsBOVKMZzW6Dp/ov6xal8vFbLpal43F",
|
||||||
|
"hashing_algorithm": "rabbit_password_hashing_sha256",
|
||||||
|
"tags": ["api_user"]
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"vhosts": [
|
||||||
|
{
|
||||||
|
"name": "/"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"permissions": [
|
||||||
|
{
|
||||||
|
"user": "admin",
|
||||||
|
"vhost": "/",
|
||||||
|
"configure": ".*",
|
||||||
|
"write": ".*",
|
||||||
|
"read": ".*"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"user": "well_pipe",
|
||||||
|
"vhost": "/",
|
||||||
|
"configure": ".*",
|
||||||
|
"write": ".*",
|
||||||
|
"read": ".*"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
||||||
Loading…
x
Reference in New Issue
Block a user