mirror of
https://github.com/funkypenguin/geek-cookbook/
synced 2026-10-15 21:42:34 +00:00
Merge with master
This commit is contained in:
David Young
@@ -0,0 +1,51 @@
|
||||
# Containers
|
||||
|
||||
In the course of creating these recipes, I've often ended up creating containers with my own tweaks or changes. Below is a list of all the containers I've built. All of them are automatic builds, and the Dockerfiles and build logs are publicly available:
|
||||
|
||||
Name | Description | Badges
|
||||
--|--|--
|
||||
[funkypenguin/athena](https://hub.docker.com/r/funkypenguin/athena/)<br/>[](https://hub.docker.com/r/funkypenguin/athena/)| Athena cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/athena/)<br/>[](https://hub.docker.com/r/funkypenguin/athena/)
|
||||
[funkypenguin/alertmanager-discord](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)<br/>[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)| AlertManager-compatible webhook to send Prometheus alerts to a Discord channel |[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)<br/>[](https://hub.docker.com/r/funkypenguin/alertmanager-discord/)
|
||||
[funkypenguin/aeon](https://hub.docker.com/r/funkypenguin/aeon/)<br/>[](https://hub.docker.com/r/funkypenguin/aeon/)| Aeon cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/aeon/)<br/>[](https://hub.docker.com/r/funkypenguin/aeon/)
|
||||
[funkypenguin/bittube](https://hub.docker.com/r/funkypenguin/bittube/)<br/>[](https://hub.docker.com/r/funkypenguin/bittube/)| BitTube cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/bittube/)<br/>[](https://hub.docker.com/r/funkypenguin/bittube/)
|
||||
[funkypenguin/cryptonote-nodejs-pool](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)| nodeJS-based mining pool for cryptonote-based mining pools, supporting advanced features like email/telegram notifications |[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/cryptonote-nodejs-pool/)
|
||||
[funkypenguin/conceal-core](https://hub.docker.com/r/funkypenguin/conceald/)<br/>[](https://hub.docker.com/r/funkypenguin/conceald//)| Conceal cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/conceald/)<br/>[](https://hub.docker.com/r/funkypenguin/conceald/)
|
||||
[funkypenguin/git-docker](https://hub.docker.com/r/funkypenguin/git-docker/)<br/>[](https://hub.docker.com/r/funkypenguin/git-docker/)| Git client in a docker container, for use on immutable OS (Atomic) hosts|[](https://hub.docker.com/r/funkypenguin/git-docker/)<br/>[](https://hub.docker.com/r/funkypenguin/git-docker/)
|
||||
[funkypenguin/home-assistant](https://hub.docker.com/r/funkypenguin/home-assistant/)<br/>[](https://hub.docker.com/r/funkypenguin/home-assistant//)| home-assistant |[](https://hub.docker.com/r/funkypenguin/home-assistant/)<br/>[](https://hub.docker.com/r/funkypenguin/home-assistant/)
|
||||
[funkypenguin/htpc-cron](https://hub.docker.com/r/funkypenguin/htpc-cron/)<br/>[](https://hub.docker.com/r/funkypenguin/htpc-cron/)| htpc-cron |[](https://hub.docker.com/r/funkypenguin/htpc-cron/)<br/>[](https://hub.docker.com/r/funkypenguin/htpc-cron/)
|
||||
[funkypenguin/kepl](https://hub.docker.com/r/funkypenguin/kepl/)<br/>[](https://hub.docker.com/r/funkypenguin/kepl/)| KEPL cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/kepl/)<br/>[](https://hub.docker.com/r/funkypenguin/kepl/)
|
||||
[funkypenguin/koson](https://hub.docker.com/r/funkypenguin/koson/)<br/>[](https://hub.docker.com/r/funkypenguin/koson/)| koson |[](https://hub.docker.com/r/funkypenguin/koson/)<br/>[](https://hub.docker.com/r/funkypenguin/koson/)
|
||||
[funkypenguin/loki](https://hub.docker.com/r/funkypenguin/loki/)<br/>[](https://hub.docker.com/r/funkypenguin/loki/)| loki |[](https://hub.docker.com/r/funkypenguin/loki/)<br/>[](https://hub.docker.com/r/funkypenguin/loki/)
|
||||
[funkypenguin/masari](https://hub.docker.com/r/funkypenguin/masari/)<br/>[](https://hub.docker.com/r/funkypenguin/masari//)| Masari cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/masari/)<br/>[](https://hub.docker.com/r/funkypenguin/masari/)
|
||||
[funkypenguin/monero](https://hub.docker.com/r/funkypenguin/monero/)<br/>[](https://hub.docker.com/r/funkypenguin/monero/)| Monero cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/monero/)<br/>[](https://hub.docker.com/r/funkypenguin/monero/)
|
||||
[funkypenguin/monkeytips](https://hub.docker.com/r/funkypenguin/monkeytips/)<br/>[](https://hub.docker.com/r/funkypenguin/monkeytips//)| MonkeyTips cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/monkeytips/)<br/>[](https://hub.docker.com/r/funkypenguin/monkeytips/)
|
||||
[funkypenguin/minio](https://hub.docker.com/r/funkypenguin/minio/)<br/>[](https://hub.docker.com/r/funkypenguin/minio/)| minio |[](https://hub.docker.com/r/funkypenguin/minio/)<br/>[](https://hub.docker.com/r/funkypenguin/minio/)
|
||||
[funkypenguin/mqtt-certbot-dns](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)<br/>[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)| mqtt-certbot-dns |[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)<br/>[](https://hub.docker.com/r/funkypenguin/mqtt-certbot-dns/)
|
||||
[funkypenguin/munin-server](https://hub.docker.com/r/funkypenguin/munin-server/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-server/)| munin-server |[](https://hub.docker.com/r/funkypenguin/munin-server/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-server/)
|
||||
[funkypenguin/munin-node](https://hub.docker.com/r/funkypenguin/munin-node/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-node/)| munin-node |[](https://hub.docker.com/r/funkypenguin/munin-node/)<br/>[](https://hub.docker.com/r/funkypenguin/munin-node/)
|
||||
[funkypenguin/mwlib](https://hub.docker.com/r/funkypenguin/mwlib/)<br/>[](https://hub.docker.com/r/funkypenguin/mwlib/)| mwlib |[](https://hub.docker.com/r/funkypenguin/mwlib/)<br/>[](https://hub.docker.com/r/funkypenguin/mwlib/)
|
||||
[funkypenguin/mqttwarn](https://hub.docker.com/r/funkypenguin/mqttwarn/)<br/>[](https://hub.docker.com/r/funkypenguin/mqttwarn/)| mqttwarn |[](https://hub.docker.com/r/funkypenguin/mqttwarn/)<br/>[](https://hub.docker.com/r/funkypenguin/mqttwarn/)
|
||||
[funkypenguin/nginx-proxy-letsencrypt](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)<br/>[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)| nginx-proxy-letsencrypt |[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)<br/>[](https://hub.docker.com/r/funkypenguin/nginx-proxy-letsencrypt/)
|
||||
[funkypenguin/nzbdrone](https://hub.docker.com/r/funkypenguin/nzbdrone/)<br/>[](https://hub.docker.com/r/funkypenguin/nzbdrone/)| nzbdrone |[](https://hub.docker.com/r/funkypenguin/nzbdrone/)<br/>[](https://hub.docker.com/r/funkypenguin/nzbdrone/)
|
||||
[funkypenguin/owntracks](https://hub.docker.com/r/funkypenguin/owntracks/)<br/>[](https://hub.docker.com/r/funkypenguin/owntracks//)| Owntracks |[](https://hub.docker.com/r/funkypenguin/owntracks/)<br/>[](https://hub.docker.com/r/funkypenguin/owntracks/)
|
||||
[funkypenguin/oauth2_proxy](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)| OAuth2 proxy supporting self-signed upstream certs |[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)
|
||||
[funkypenguin/plex](https://hub.docker.com/r/funkypenguin/plex/)<br/>[](https://hub.docker.com/r/funkypenguin/plex/)| plex |[](https://hub.docker.com/r/funkypenguin/plex/)<br/>[](https://hub.docker.com/r/funkypenguin/plex/)
|
||||
[funkypenguin/radarrsync](https://hub.docker.com/r/funkypenguin/radarrsync/)<br/>[](https://hub.docker.com/r/funkypenguin/radarrsync/)| Python script to sync multiple Radarr instances |[](https://hub.docker.com/r/funkypenguin/radarrsync/)<br/>[](https://hub.docker.com/r/funkypenguin/radarrsync/)
|
||||
[funkypenguin/ryo-currency](https://hub.docker.com/r/funkypenguin/ryo-currency/)<br/>[](https://hub.docker.com/r/funkypenguin/ryo-currency/)| RYO cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/ryo-currency/)<br/>[](https://hub.docker.com/r/funkypenguin/ryo-currency/)
|
||||
[funkypenguin/rtorrent](https://hub.docker.com/r/funkypenguin/rtorrent/)<br/>[](https://hub.docker.com/r/funkypenguin/rtorrent/)| rtorrent |[](https://hub.docker.com/r/funkypenguin/rtorrent/)<br/>[](https://hub.docker.com/r/funkypenguin/rtorrent/)
|
||||
[funkypenguin/sabnzbd](https://hub.docker.com/r/funkypenguin/sabnzbd/)<br/>[](https://hub.docker.com/r/funkypenguin/oauth2_proxy/)| sabnzbd |[](https://hub.docker.com/r/funkypenguin/sabnzbd/)<br/>[](https://hub.docker.com/r/funkypenguin/sabnzbd/)
|
||||
[funkypenguin/turtlecoind](https://hub.docker.com/r/funkypenguin/turtlecoind/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoind/)| turtlecoin |[](https://hub.docker.com/r/funkypenguin/turtlecoind/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoind/)
|
||||
[funkypenguin/temasek](https://hub.docker.com/r/funkypenguin/temasek/)<br/>[](https://hub.docker.com/r/funkypenguin/temasek/)| temasek |[](https://hub.docker.com/r/funkypenguin/temasek/)<br/>[](https://hub.docker.com/r/funkypenguin/temasek/)
|
||||
[funkypenguin/turtle-pool](https://hub.docker.com/r/funkypenguin/turtle-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/turtle-pool//)| turtle-pool |[](https://hub.docker.com/r/funkypenguin/turtle-pool/)<br/>[](https://hub.docker.com/r/funkypenguin/turtle-pool/)
|
||||
[funkypenguin/turtlecoin](https://hub.docker.com/r/funkypenguin/turtlecoin/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoin/)| turtlecoin |[](https://hub.docker.com/r/funkypenguin/turtlecoin/)<br/>[](https://hub.docker.com/r/funkypenguin/turtlecoin/)
|
||||
[funkypenguin/x-cash](https://hub.docker.com/r/funkypenguin/x-cash/)<br/>[](https://hub.docker.com/r/funkypenguin/x-cash/)| X-CASH cryptocurrency daemon/services |[](https://hub.docker.com/r/funkypenguin/x-cash/)<br/>[](https://hub.docker.com/r/funkypenguin/x-cash/)
|
||||
[funkypenguin/xmrig-cpu](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)<br/>[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)| xmrig-cpu |[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)<br/>[](https://hub.docker.com/r/funkypenguin/xmrig-cpu/)|
|
||||
|
||||
|
||||
## Chef's Notes
|
||||
|
||||
### Tip your waiter (donate) 👏
|
||||
|
||||
Did you receive excellent service? Want to make your waiter happy? (_..and support development of current and future recipes!_) See the [support](/support/) page for (_free or paid)_ ways to say thank you! 👏
|
||||
|
||||
### Your comments? 💬
|
||||
@@ -1,6 +1,6 @@
|
||||
# Data layout
|
||||
|
||||
The applications deployed in the stack utilize a combination of data-at-rest (_static config, files, etc_) and runtime data (_live database files_). The realtime data can't be [backed up](/recipies/duplicity) with a simple copy-paste, so where we employ databases, we also include containers to perform a regular export of database data to a filesystem location.
|
||||
The applications deployed in the stack utilize a combination of data-at-rest (_static config, files, etc_) and runtime data (_live database files_). The realtime data can't be [backed up](/recipes/duplicity) with a simple copy-paste, so where we employ databases, we also include containers to perform a regular export of database data to a filesystem location.
|
||||
|
||||
So that we can confidently backup all our data, I've setup a data layout as follows:
|
||||
|
||||
|
||||
@@ -0,0 +1,192 @@
|
||||
## Terraform
|
||||
|
||||
We _could_ describe the manual gcloud/ssh steps required to deploy a Kubernetes cluster to Google Kubernetes Engine, but using Terraform allows us to abstract ourself from the provider, and focus on just the infrastructure we need built.
|
||||
|
||||
The terraform config we produce is theoretically reusabel across AWS, Azure, OpenStack, as well as GCE.
|
||||
|
||||
Install terraform locally - on OSX, I used ```brew install terraform```
|
||||
|
||||
Confirm it's correctly installed by running ```terraform -v```. My output looks like this:
|
||||
|
||||
```
|
||||
[davidy:~] % terraform -v
|
||||
Terraform v0.11.8
|
||||
|
||||
[davidy:~] %
|
||||
```
|
||||
|
||||
## Google Cloud SDK
|
||||
|
||||
I can't remember how I installed gcloud, but I don't think I used homebrew. Run ```curl https://sdk.cloud.google.com | bash``` for a standard install, followed by ```gcloud init``` for the first-time setup.
|
||||
|
||||
This works:
|
||||
|
||||
```
|
||||
cat <<-"BREWFILE" > Brewfile
|
||||
cask 'google-cloud-sdk'
|
||||
brew 'kubectl'
|
||||
brew 'terraform'
|
||||
BREWFILE
|
||||
brew bundle --verbose
|
||||
```
|
||||
|
||||
|
||||
### Prepare for terraform
|
||||
|
||||
I followed [this guide](https://cloud.google.com/community/tutorials/managing-gcp-projects-with-terraform) to setup the following in the "best" way:
|
||||
|
||||
Run ```gcloud beta billing accounts list``` to get your billing account
|
||||
|
||||
```
|
||||
|
||||
export TF_ADMIN=tf-admin-funkypenguin
|
||||
export TF_CREDS=serviceaccount.json
|
||||
export TF_VAR_org_id=250566349101
|
||||
export TF_VAR_billing_account=0156AE-7AE048-1DA888
|
||||
export TF_VAR_region=australia-southeast1
|
||||
export GOOGLE_APPLICATION_CREDENTIALS=${TF_CREDS}
|
||||
|
||||
gcloud projects create ${TF_ADMIN} --set-as-default
|
||||
gcloud beta billing projects link ${TF_ADMIN} \
|
||||
--billing-account ${TF_VAR_billing_account}
|
||||
|
||||
gcloud iam service-accounts create terraform \
|
||||
--display-name "Terraform admin account"
|
||||
Created service account [terraform].
|
||||
|
||||
gcloud iam service-accounts keys create ${TF_CREDS} \
|
||||
--iam-account terraform@${TF_ADMIN}.iam.gserviceaccount.com
|
||||
created key [c0a49832c94aa0e23278165e2d316ee3d5bad438] of type [json] as [serviceaccount.json] for [terraform@funkypenguin-terraform-admin.iam.gserviceaccount.com]
|
||||
|
||||
gcloud projects add-iam-policy-binding ${TF_ADMIN} \
|
||||
> --member serviceAccount:terraform@${TF_ADMIN}.iam.gserviceaccount.com \
|
||||
> --role roles/viewer
|
||||
bindings:
|
||||
- members:
|
||||
- user:googlecloud2018@funkypenguin.co.nz
|
||||
role: roles/owner
|
||||
- members:
|
||||
- serviceAccount:terraform@funkypenguin-terraform-admin.iam.gserviceaccount.com
|
||||
role: roles/viewer
|
||||
etag: BwV0VGSzYSU=
|
||||
version: 1gcloud projects add-iam-policy-binding ${TF_ADMIN} \
|
||||
> --member serviceAccount:terraform@${TF_ADMIN}.iam.gserviceaccount.com \
|
||||
> --role roles/viewer
|
||||
bindings:
|
||||
- members:
|
||||
- user:googlecloud2018@funkypenguin.co.nz
|
||||
role: roles/owner
|
||||
- members:
|
||||
- serviceAccount:terraform@funkypenguin-terraform-admin.iam.gserviceaccount.com
|
||||
role: roles/viewer
|
||||
etag: BwV0VGSzYSU=
|
||||
version: 1
|
||||
|
||||
gcloud projects add-iam-policy-binding ${TF_ADMIN} \
|
||||
> --member serviceAccount:terraform@${TF_ADMIN}.iam.gserviceaccount.com \
|
||||
> --role roles/storage.admin
|
||||
bindings:
|
||||
- members:
|
||||
- user:googlecloud2018@funkypenguin.co.nz
|
||||
role: roles/owner
|
||||
- members:
|
||||
- serviceAccount:terraform@funkypenguin-terraform-admin.iam.gserviceaccount.com
|
||||
role: roles/storage.admin
|
||||
- members:
|
||||
- serviceAccount:terraform@funkypenguin-terraform-admin.iam.gserviceaccount.com
|
||||
role: roles/viewer
|
||||
etag: BwV0VGZwXfM=
|
||||
version: 1
|
||||
|
||||
|
||||
gcloud services enable cloudresourcemanager.googleapis.com
|
||||
gcloud services enable cloudbilling.googleapis.com
|
||||
gcloud services enable iam.googleapis.com
|
||||
gcloud services enable compute.googleapis.com
|
||||
|
||||
## FIXME
|
||||
Enabled Kubernetes Engine API in the tf-admin project, so that terraform can actually compute versions of the engine available
|
||||
|
||||
## FIXME
|
||||
|
||||
I had to add compute admin, service admin, and kubernetes engine admin to my org-level account, in order to use gcloud get-cluster-credentilals
|
||||
|
||||
|
||||
|
||||
gsutil mb -p ${TF_ADMIN} gs://${TF_ADMIN}
|
||||
Creating gs://funkypenguin-terraform-admin/...
|
||||
[davidy:~/Documents … remix/kubernetes/terraform] master(+1/-0)* ±
|
||||
[davidy:~/Documents … remix/kubernetes/terraform] master(+1/-0)* ± cat > backend.tf <<EOF
|
||||
heredoc> terraform {
|
||||
heredoc> backend "gcs" {
|
||||
heredoc> bucket = "${TF_ADMIN}"
|
||||
heredoc> path = "/terraform.tfstate"
|
||||
heredoc> project = "${TF_ADMIN}"
|
||||
heredoc> }
|
||||
heredoc> }
|
||||
heredoc> EOF
|
||||
[davidy:~/Documents … remix/kubernetes/terraform] master(+1/-0)* ± gsutil versioning set on gs://${TF_ADMIN}
|
||||
Enabling versioning for gs://funkypenguin-terraform-admin/...
|
||||
[davidy:~/Documents … remix/kubernetes/terraform] master(+1/-0)* ± export GOOGLE_APPLICATION_CREDENTIALS=${TF_CREDS}
|
||||
export GOOGLE_PROJECT=${TF_ADMIN}
|
||||
|
||||
|
||||
```
|
||||
|
||||
### Create Service Account
|
||||
|
||||
Since it's probably not a great idea to associate your own, master Google Cloud account with your automation process (after all, you can't easily revoke your own credentials if they leak), create a Service Account for terraform under GCE, and grant it the "Compute Admin" role.
|
||||
|
||||
Download the resulting JSON, and save it wherever you're saving your code. Remember to protect this .json file like a password, so add it to .gitignore if you're checking your code into git (_and if you're not checking your code into git, what's wrong with you, just do it now!_)
|
||||
|
||||
### Setup provider.tf
|
||||
|
||||
I setup my provider like this, noting that the project name (which must already be created) came from the output of ```gloud projects list```, and region/zone came from https://cloud.google.com/compute/docs/regions-zones/
|
||||
|
||||
```
|
||||
# Specify the provider (GCP, AWS, Azure)
|
||||
provider "google" {
|
||||
credentials = "${file("serviceaccount.json")}"
|
||||
project = "funkypenguin-mining-pools"
|
||||
region = "australia-southeast1"
|
||||
}
|
||||
```
|
||||
|
||||
### Setup compute.tf
|
||||
|
||||
Just playing, I setup this:
|
||||
|
||||
```
|
||||
# Create a new instance
|
||||
resource "google_compute_instance" "ubuntu-xenial" {
|
||||
name = "ubuntu-xenial"
|
||||
machine_type = "f1-micro"
|
||||
zone = "us-west1-a"
|
||||
boot_disk {
|
||||
initialize_params {
|
||||
image = "ubuntu-1604-lts"
|
||||
}
|
||||
}
|
||||
network_interface {
|
||||
network = "default"
|
||||
access_config {}
|
||||
}
|
||||
service_account {
|
||||
scopes = ["userinfo-email", "compute-ro", "storage-ro"]
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### Initialize and plan (it's free)
|
||||
|
||||
Run ```terraform init``` to initialize Terraform
|
||||
|
||||
Then run ```terrafor plan``` to check that the plan looks good.
|
||||
|
||||
### Apply (not necessarily free)
|
||||
|
||||
Once your plan (above) is good, run ```terraform apply``` to put it into motion. This is the point where you may start incurring costs.
|
||||
|
||||
### Setup kubectl
|
||||
|
||||
gcloud container clusters get-credentials $(terraform output cluster_name) --zone $(terraform output cluster_zone) --project $(terraform output project_id)
|
||||
@@ -6,29 +6,49 @@ Network | Range
|
||||
--|--
|
||||
[Traefik](https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/traefik/) | _unspecified_
|
||||
[Docker-cleanup](https://geek-cookbook.funkypenguin.co.nz/ha-docker-swarm/docker-swarm-mode/#setup-automated-cleanup) | 172.16.0.0/24
|
||||
[Mail Server](https://geek-cookbook.funkypenguin.co.nz/recipies/mail/) | 172.16.1.0/24
|
||||
[Gitlab](https://geek-cookbook.funkypenguin.co.nz/recipies/gitlab/) | 172.16.2.0/24
|
||||
[Wekan](https://geek-cookbook.funkypenguin.co.nz/recipies/wekan/) | 172.16.3.0/24
|
||||
[Piwik](https://geek-cookbook.funkypenguin.co.nz/recipies/piwki/) | 172.16.4.0/24
|
||||
[Tiny Tiny RSS](https://geek-cookbook.funkypenguin.co.nz/recipies/tiny-tiny-rss/) | 172.16.5.0/24
|
||||
[Huginn](https://geek-cookbook.funkypenguin.co.nz/recipies/huginn/) | 172.16.6.0/24
|
||||
[Unifi](https://geek-cookbook.funkypenguin.co.nz/recipies/unifi/) | 172.16.7.0/24
|
||||
[Kanboard](https://geek-cookbook.funkypenguin.co.nz/recipies/kanboard/) | 172.16.8.0/24
|
||||
[Gollum](https://geek-cookbook.funkypenguin.co.nz/recipies/gollum/) | 172.16.9.0/24
|
||||
[Duplicity](https://geek-cookbook.funkypenguin.co.nz/recipies/duplicity/) | 172.16.10.0/24
|
||||
[Autopirate](https://geek-cookbook.funkypenguin.co.nz/recipies/autopirate/) | 172.16.11.0/24
|
||||
[Nextcloud](https://geek-cookbook.funkypenguin.co.nz/recipies/nextcloud/) | 172.16.12.0/24
|
||||
[Portainer](https://geek-cookbook.funkypenguin.co.nz/recipies/portainer/) | 172.16.13.0/24
|
||||
[Home-Assistant](https://geek-cookbook.funkypenguin.co.nz/recipies/home-assistant/) | 172.16.14.0/24
|
||||
[OwnTracks](https://geek-cookbook.funkypenguin.co.nz/recipies/owntracks/) | 172.16.15.0/24
|
||||
[Plex](https://geek-cookbook.funkypenguin.co.nz/recipies/plex/) | 172.16.16.0/24
|
||||
[Emby](https://geek-cookbook.funkypenguin.co.nz/recipies/emby/) | 172.16.17.0/24
|
||||
[Calibre-Web](https://geek-cookbook.funkypenguin.co.nz/recipies/calibre-web/) | 172.16.18.0/24
|
||||
[Wallabag](https://geek-cookbook.funkypenguin.co.nz/recipies/wallabag/) | 172.16.19.0/24
|
||||
[InstaPy](https://geek-cookbook.funkypenguin.co.nz/recipies/instapy/) | 172.16.20.0/24
|
||||
[Turtle Pool](https://geek-cookbook.funkypenguin.co.nz/recipies/turtle-pool/) | 172.16.21.0/24
|
||||
[MiniFlux](https://geek-cookbook.funkypenguin.co.nz/recipies/miniflux/) | 172.16.22.0/24
|
||||
[Gitlab Runner](https://geek-cookbook.funkypenguin.co.nz/recipies/gitlab-runner/) | 172.16.23.0/24
|
||||
[Mail Server](https://geek-cookbook.funkypenguin.co.nz/recipes/mail/) | 172.16.1.0/24
|
||||
[Gitlab](https://geek-cookbook.funkypenguin.co.nz/recipes/gitlab/) | 172.16.2.0/24
|
||||
[Wekan](https://geek-cookbook.funkypenguin.co.nz/recipes/wekan/) | 172.16.3.0/24
|
||||
[Piwik](https://geek-cookbook.funkypenguin.co.nz/recipes/piwki/) | 172.16.4.0/24
|
||||
[Tiny Tiny RSS](https://geek-cookbook.funkypenguin.co.nz/recipes/tiny-tiny-rss/) | 172.16.5.0/24
|
||||
[Huginn](https://geek-cookbook.funkypenguin.co.nz/recipes/huginn/) | 172.16.6.0/24
|
||||
[Unifi](https://geek-cookbook.funkypenguin.co.nz/recipes/unifi/) | 172.16.7.0/24
|
||||
[Kanboard](https://geek-cookbook.funkypenguin.co.nz/recipes/kanboard/) | 172.16.8.0/24
|
||||
[Gollum](https://geek-cookbook.funkypenguin.co.nz/recipes/gollum/) | 172.16.9.0/24
|
||||
[Duplicity](https://geek-cookbook.funkypenguin.co.nz/recipes/duplicity/) | 172.16.10.0/24
|
||||
[Autopirate](https://geek-cookbook.funkypenguin.co.nz/recipes/autopirate/) | 172.16.11.0/24
|
||||
[Nextcloud](https://geek-cookbook.funkypenguin.co.nz/recipes/nextcloud/) | 172.16.12.0/24
|
||||
[Portainer](https://geek-cookbook.funkypenguin.co.nz/recipes/portainer/) | 172.16.13.0/24
|
||||
[Home-Assistant](https://geek-cookbook.funkypenguin.co.nz/recipes/home-assistant/) | 172.16.14.0/24
|
||||
[OwnTracks](https://geek-cookbook.funkypenguin.co.nz/recipes/owntracks/) | 172.16.15.0/24
|
||||
[Plex](https://geek-cookbook.funkypenguin.co.nz/recipes/plex/) | 172.16.16.0/24
|
||||
[Emby](https://geek-cookbook.funkypenguin.co.nz/recipes/emby/) | 172.16.17.0/24
|
||||
[Calibre-Web](https://geek-cookbook.funkypenguin.co.nz/recipes/calibre-web/) | 172.16.18.0/24
|
||||
[Wallabag](https://geek-cookbook.funkypenguin.co.nz/recipes/wallabag/) | 172.16.19.0/24
|
||||
[InstaPy](https://geek-cookbook.funkypenguin.co.nz/recipes/instapy/) | 172.16.20.0/24
|
||||
[Turtle Pool](https://geek-cookbook.funkypenguin.co.nz/recipes/turtle-pool/) | 172.16.21.0/24
|
||||
[MiniFlux](https://geek-cookbook.funkypenguin.co.nz/recipes/miniflux/) | 172.16.22.0/24
|
||||
[Gitlab Runner](https://geek-cookbook.funkypenguin.co.nz/recipes/gitlab-runner/) | 172.16.23.0/24
|
||||
[Munin](https://geek-cookbook.funkypenguin.co.nz/recipes/munin/) | 172.16.24.0/24
|
||||
[Masari Mining Pool](https://geek-cookbook.funkypenguin.co.nz/recipes/cryptonote-mining-pool/masari/) | 172.16.25.0/24
|
||||
[Athena Mining Pool](https://geek-cookbook.funkypenguin.co.nz/recipes/cryptonote-mining-pool/athena/) | 172.16.26.0/24
|
||||
[Bookstack](https://geek-cookbook.funkypenguin.co.nz/recipes/bookstack/) | 172.16.33.0/24
|
||||
[Swarmprom](https://geek-cookbook.funkypenguin.co.nz/recipes/swarmprom/) | 172.16.34.0/24
|
||||
[Realms](https://geek-cookbook.funkypenguin.co.nz/recipes/realms/) | 172.16.35.0/24
|
||||
[ElkarBackup](https://geek-cookbook.funkypenguin.co.nz/recipes/elkarbackp/) | 172.16.36.0/24
|
||||
[Mayan EDMS](https://geek-cookbook.funkypenguin.co.nz/recipes/realms/) | 172.16.37.0/24
|
||||
[Shaarli](https://geek-cookbook.funkypenguin.co.nz/recipes/shaarli/) | 172.16.38.0/24
|
||||
[OpenLDAP](https://geek-cookbook.funkypenguin.co.nz/recipes/openldap/) | 172.16.39.0/24
|
||||
[MatterMost](https://geek-cookbook.funkypenguin.co.nz/recipes/mattermost/) | 172.16.40.0/24
|
||||
[PrivateBin](https://geek-cookbook.funkypenguin.co.nz/recipes/privatebin/) | 172.16.41.0/24
|
||||
[Mayan EDMS](https://geek-cookbook.funkypenguin.co.nz/recipes/mayan-edms/) | 172.16.42.0/24
|
||||
[Hack MD](https://geek-cookbook.funkypenguin.co.nz/recipes/hackmd/) | 172.16.43.0/24
|
||||
[FlightAirMap](https://geek-cookbook.funkypenguin.co.nz/recipes/flightairmap/) |172.16.44.0/24
|
||||
[Wetty](https://geek-cookbook.funkypenguin.co.nz/recipes/wetty/) | 172.16.45.0/24
|
||||
[FileBrowser](https://geek-cookbook.funkypenguin.co.nz/recipes/filebrowser/) | 172.16.46.0/24
|
||||
[phpIPAM](https://geek-cookbook.funkypenguin.co.nz/recipes/phpipam/) | 172.16.47.0/24
|
||||
[Dozzle](https://geek-cookbook.funkypenguin.co.nz/recipes/dozzle/) | 172.16.48.0/24
|
||||
|
||||
|
||||
## Chef's Notes
|
||||
|
||||
|
||||
@@ -47,11 +47,11 @@ I created **/var/data/oauth_proxy/authenticated-emails.txt**, and add my own ema
|
||||
|
||||
### Configure stack
|
||||
|
||||
You'll need to define a service for the oauth_proxy in every stack which you want to protect. Here's an example from the [Wekan](/recipies/wekan/) recipe:
|
||||
You'll need to define a service for the oauth_proxy in every stack which you want to protect. Here's an example from the [Wekan](/recipes/wekan/) recipe:
|
||||
|
||||
```
|
||||
proxy:
|
||||
image: zappi/oauth2_proxy
|
||||
image: a5huynh/oauth2_proxy
|
||||
env_file : /var/data/wekan/wekan.env
|
||||
networks:
|
||||
- traefik
|
||||
|
||||
@@ -16,6 +16,14 @@ SSH to the host node, and attach to the container using ```docker exec -it <cont
|
||||
|
||||
Need to see what a particular container is doing? Run ```docker service logs -f <stack name>_<container name>``` to watch a particular service. As the service dies and is recreated, the logs will continue to be displayed.
|
||||
|
||||
## Visually monitoring containers with ctop
|
||||
|
||||
For a visual "top-like" display of your container's activity (_as well as a [detailed per-container view](https://github.com/bcicen/ctop/blob/master/_docs/single.md)_), try using [ctop](https://github.com/bcicen/ctop).
|
||||
|
||||
To execute, simply run ```docker run --rm -ti --name ctop -v /var/run/docker.sock:/var/run/docker.sock quay.io/vektorlab/ctop:latest```
|
||||
|
||||
Example:
|
||||
|
||||
|
||||
## Chef's Notes
|
||||
|
||||
|
||||
Reference in New Issue
Block a user