mirror of
https://github.com/funkypenguin/geek-cookbook/
synced 2026-11-06 15:28:18 +00:00
Update for leanpub preview
This commit is contained in:
1 parent
8da6e914a5
commit
3862d7c2f6
91 files changed
+703
-628
No files matched your search
@@ -8,7 +8,7 @@ hero: Terminal in a browser, baby!
|
||||
|
||||
## Why would you need SSH in a browser window?
|
||||
|
||||
Need shell access to a node with no external access? Deploy Wetty behind an [oauth_proxy](https://geek-cookbook.funkypenguin.co.nz/)reference/oauth_proxy/) with a SSL-terminating reverse proxy ([traefik](https://geek-cookbook.funkypenguin.co.nz/)ha-docker-swarm/traefik/)), and suddenly you have the means to SSH to your private host from any web browser (_protected by your [oauth_proxy](https://geek-cookbook.funkypenguin.co.nz/)reference/oauth_proxy/) of course, and your OAuth provider's 2FA_)
|
||||
Need shell access to a node with no external access? Deploy Wetty behind an [oauth_proxy]https://geek-cookbook.funkypenguin.co.nz/reference/oauth_proxy/) with a SSL-terminating reverse proxy ([traefik]https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/traefik/)), and suddenly you have the means to SSH to your private host from any web browser (_protected by your [oauth_proxy]https://geek-cookbook.funkypenguin.co.nz/reference/oauth_proxy/) of course, and your OAuth provider's 2FA_)
|
||||
|
||||
Here are some other possible use cases:
|
||||
|
||||
@@ -18,15 +18,15 @@ Here are some other possible use cases:
|
||||
|
||||
## Ingredients
|
||||
|
||||
1. [Docker swarm cluster](https://geek-cookbook.funkypenguin.co.nz/)ha-docker-swarm/design/) with [persistent shared storage](https://geek-cookbook.funkypenguin.co.nz/)ha-docker-swarm/shared-storage-ceph.md)
|
||||
2. [Traefik](https://geek-cookbook.funkypenguin.co.nz/)ha-docker-swarm/traefik_public) configured per design
|
||||
1. [Docker swarm cluster]https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/design/) with [persistent shared storage]https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/shared-storage-ceph.md)
|
||||
2. [Traefik]https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/traefik_public) configured per design
|
||||
3. DNS entry for the hostname you intend to use, pointed to your [keepalived](ha-docker-swarm/keepalived/) IP
|
||||
|
||||
## Preparation
|
||||
|
||||
### Prepare environment
|
||||
|
||||
Create wetty.env, and populate with the following variables per the [oauth_proxy](https://geek-cookbook.funkypenguin.co.nz/)reference/oauth_proxy/) instructions:
|
||||
Create wetty.env, and populate with the following variables per the [oauth_proxy]https://geek-cookbook.funkypenguin.co.nz/reference/oauth_proxy/) instructions:
|
||||
```
|
||||
OAUTH2_PROXY_CLIENT_ID=
|
||||
OAUTH2_PROXY_CLIENT_SECRET=
|
||||
@@ -86,7 +86,7 @@ networks:
|
||||
```
|
||||
|
||||
!!! note
|
||||
Setup unique static subnets for every stack you deploy. This avoids IP/gateway conflicts which can otherwise occur when you're creating/removing stacks a lot. See [my list](https://geek-cookbook.funkypenguin.co.nz/)reference/networks/) here.
|
||||
Setup unique static subnets for every stack you deploy. This avoids IP/gateway conflicts which can otherwise occur when you're creating/removing stacks a lot. See [my list]https://geek-cookbook.funkypenguin.co.nz/reference/networks/) here.
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in new issue
Block a user