Unverified Commit 14ca9a9c authored by Tom Moulard's avatar Tom Moulard
Browse files

docker: more security for the passwd and moving the label of traefik in the right place

parent 973b52d0

README.md

+3 −3
Original line number Diff line number Diff line
@@ -70,10 +70,10 @@ Don't forget to change db passwords. (migth not be needed since they are beyond 
the reverse proxy).

Fill vpn secrets(if none provided, they are generated directly).

Configuration files are: `docker-compose.yml`, `nginx.conf`



To set the password:

```bash

export USERNAME=

export PASSWORD=

export HASHED_PASSWORD=$(openssl passwd -apr1 $PASSWORD)

export HASHED_PASSWORD=$(openssl passwd -apr1)

```



### Scalling up

docker-compose.yml

+1 −1
Original line number Diff line number Diff line
@@ -19,12 +19,12 @@ services: 
      - 'traefik.enable=true'

      - 'traefik.port=8080'

      - 'traefik.frontend.rule=Host:traefik.${SITE}'

      - 'traefik.frontend.auth.basic.users=${USER}:${HASHED_PASSWORD}'

    volumes:

      - '/var/run/docker.sock:/var/run/docker.sock'

      - './traefik/traefik.toml:/traefik.toml'

      - './traefik/acme.json:/acme.json'

      - './traefik/logs:/logs'

      - 'traefik.frontend.auth.basic.users=${USERNAME}:${HASHED_PASSWORD}'



  fluentd:

    build: ./fluentd