mirror of
https://github.com/ledgersmb/ledgersmb-docker.git
synced 2025-10-20 19:20:31 -04:00
Nginx reverse proxy combined with Starman server in one image (#46)
* feat: provide image with nginx * Re-use parent container configuration and startup scripts * Rewrite proxy Dockerfile: * ARCH used to be hard-coded; is now set according to the architecture being built * Build from the associated LedgerSMB base image (not from 'lsmb-split') * More deletion of non-required files (/usr/share/doc/*) * Fewer layers by combining RUN commands * Use 'server-start' script generated by the installer instead of repeating ourselves * Don't expose the status module It won't be accessible anyway: the localhost address is the one inside the container... * Ensure relative redirects When the container port :80 is exposed as :8080 on the host, nginx redirects to http://localhost:80/login.pl with a relative path, instead of http://localhost:8080/login.pl; the container isn't bound to :80, so that request fails... * Rename proxy layer image * Adjust 'build' script to publish base and regular images --------- Co-authored-by: Walid Mujahid <walidmujahid@gmail.com>
This commit is contained in:
@@ -1,100 +0,0 @@
|
||||
# This docker-compose file creates one
|
||||
# compose 'project' consisting of two containers
|
||||
#
|
||||
# 1. The PostgreSQL data container
|
||||
# 2. The LedgerSMB application container
|
||||
#
|
||||
# LedgerSMB persists all its data in the database,
|
||||
# so no special care needs to be taken on
|
||||
# container upgrades. With PostgreSQL, data is
|
||||
# persisted across upgrades by the use of a
|
||||
# special 'dbdata' volume
|
||||
|
||||
version: "3.2"
|
||||
services:
|
||||
# Note that the container needs to be named "postgres" here,
|
||||
# because that allows us to use the default hostname ("postgres")
|
||||
# from the LedgerSMB configuration
|
||||
postgres:
|
||||
image: postgres:15-alpine
|
||||
environment:
|
||||
# Replace the password below for a secure setup
|
||||
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-abc}
|
||||
PGDATA: /var/lib/postgresql/data/pgdata
|
||||
networks:
|
||||
- internal
|
||||
volumes:
|
||||
- "pgdata:/var/lib/postgresql/data"
|
||||
# Comment the line below to stop the container from restarting on boot
|
||||
# unless it was manually stopped
|
||||
restart: unless-stopped
|
||||
lsmb:
|
||||
depends_on:
|
||||
- postgres
|
||||
image: ghcr.io/ledgersmb/ledgersmb:1.12
|
||||
# In order to store the configuration outside the image, allowing it to
|
||||
# be edited between container restarts, uncomment the section below and
|
||||
# change the 'source' to the directory where you want the configuration
|
||||
# to be stored.
|
||||
# volumes:
|
||||
# # Override all configuration:
|
||||
# - type: bind
|
||||
# source: /home/ledgersmb/conf
|
||||
# target: /srv/ledgersmb/local/conf
|
||||
# # Add a snippet of configuration:
|
||||
# - type: bind
|
||||
# source: /home/ledgersmb/conf/ledgersmb.100.yaml
|
||||
# target: /srv/ledgersmb/local/conf/ledgersmb.100.yaml
|
||||
networks:
|
||||
- internal
|
||||
- default
|
||||
# Comment the 'ports' section to disable mapping the LedgerSMB container port (5762)
|
||||
# to the host's port of the same number. Mapping "5762:5762" makes LedgerSMB
|
||||
# available on http://<host-dns-or-ip>:5762/
|
||||
# SECURITY NOTE: Leave this uncommented for evaluation purposes only!
|
||||
# In production, be sure to use SSL/TLS (such as by reverse proxying) to protect
|
||||
# user's passwords and other sensitive data
|
||||
ports:
|
||||
- "5762:5762"
|
||||
environment:
|
||||
# The LSMB_WORKERS environment variable lets you select the number
|
||||
# of processes serving HTTP requests. The default number of 2 workers
|
||||
# is geared toward limited-memory situations (1 GB). In order to
|
||||
# improve the performance experience, increase memory and the
|
||||
# number of workers
|
||||
#
|
||||
LSMB_WORKERS: ${LSMB_WORKERS:-5}
|
||||
#
|
||||
#
|
||||
|
||||
# LSMB_MAIL_SMTPHOST:
|
||||
# LSMB_MAIL_SMTPPORT:
|
||||
# LSMB_MAIL_SMTPTLS:
|
||||
# LSMB_MAIL_SMTPSENDER_HOSTNAME:
|
||||
# LSMB_MAIL_SMTPUSER:
|
||||
# LSMB_MAIL_SMTPPASS:
|
||||
# LSMB_MAIL_SMTPAUTHMECH:
|
||||
#
|
||||
#
|
||||
# The PROXY_IP environment variable lets you set the IP address
|
||||
# (range) of the reverse proxy used for TLS termination, which forwards
|
||||
# its requests to this container. When this reverse proxy runs on the
|
||||
# Docker host, the default below applies. In case the reverse proxy is
|
||||
# hosted in a separate container, this setting needs to be adjusted.
|
||||
#
|
||||
# PROXY_IP: 172.17.0.1/12
|
||||
# Comment the line below to stop the container from restarting on boot
|
||||
# unless it was manually stopped
|
||||
restart: unless-stopped
|
||||
|
||||
# having the dbdata volume is required to persist our
|
||||
# data between PostgreSQL container updates; without
|
||||
# that, the data is contained in the same volume as
|
||||
# the rest of the image and on update/upgrade, the
|
||||
# data will be lost.
|
||||
volumes:
|
||||
pgdata:
|
||||
|
||||
|
||||
networks:
|
||||
internal:
|
Reference in New Issue
Block a user