mirror of
https://github.com/funkypenguin/geek-cookbook/
synced 2025-12-13 09:46:23 +00:00
123 lines
3.4 KiB
Markdown
123 lines
3.4 KiB
Markdown
hero: Not all heroes wear capes
|
|
|
|
!!! danger "This recipe is a work in progress"
|
|
This recipe is **incomplete**, and is featured to align the [sponsors](https://github.com/sponsors/funkypenguin)'s "premix" repository with the cookbook. "_premix_" is a private git repository available to [GitHub sponsors](https://github.com/sponsors/funkypenguin), which includes necessary docker-compose and env files for all published recipes. This means that sponsors can launch any recipe with just a ```git pull``` and a ```docker stack deploy``` 👍
|
|
|
|
So... There may be errors and inaccuracies. Jump into [Discord](http://chat.funkypenguin.co.nz) if you're encountering issues 😁
|
|
|
|
# NAME
|
|
|
|
Intro
|
|
|
|
|
|
|
|
Details
|
|
|
|
## Ingredients
|
|
|
|
1. [Kubernetes cluster](/kubernetes/cluster/)
|
|
|
|
## Preparation
|
|
|
|
### Create data locations
|
|
|
|
```
|
|
mkdir /var/data/config/mqtt
|
|
```
|
|
|
|
### Create namespace
|
|
|
|
We use Kubernetes namespaces for service discovery and isolation between our stacks, so create a namespace for the mqtt stack by creating the following .yaml:
|
|
|
|
```
|
|
cat <<EOF > /var/data/mqtt/namespace.yaml
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: mqtt
|
|
EOF
|
|
kubectl create -f /var/data/mqtt/namespace.yaml
|
|
```
|
|
|
|
### Prepare environment
|
|
|
|
Create wekan.env, and populate with the following variables
|
|
```
|
|
OAUTH2_PROXY_CLIENT_ID=
|
|
OAUTH2_PROXY_CLIENT_SECRET=
|
|
OAUTH2_PROXY_COOKIE_SECRET=
|
|
MONGO_URL=mongodb://wekandb:27017/wekan
|
|
ROOT_URL=https://wekan.example.com
|
|
MAIL_URL=smtp://wekan@wekan.example.com:password@mail.example.com:587/
|
|
MAIL_FROM="Wekan <wekan@wekan.example.com>"
|
|
```
|
|
|
|
### Setup Docker Swarm
|
|
|
|
Create a docker swarm config file in docker-compose syntax (v3), something like this:
|
|
|
|
--8<-- "premix-cta.md"
|
|
|
|
```
|
|
version: '3'
|
|
|
|
services:
|
|
|
|
wekandb:
|
|
image: mongo:3.2.15
|
|
command: mongod --smallfiles --oplogSize 128
|
|
networks:
|
|
- internal
|
|
volumes:
|
|
- /var/data/wekan/wekan-db:/data/db
|
|
- /var/data/wekan/wekan-db-dump:/dump
|
|
|
|
proxy:
|
|
image: a5huynh/oauth2_proxy
|
|
env_file: /var/data/wekan/wekan.env
|
|
networks:
|
|
- traefik_public
|
|
- internal
|
|
deploy:
|
|
labels:
|
|
- traefik_public.frontend.rule=Host:wekan.example.com
|
|
- traefik_public.docker.network=traefik_public
|
|
- traefik_public.port=4180
|
|
command: |
|
|
-cookie-secure=false
|
|
-upstream=http://wekan:80
|
|
-redirect-url=https://wekan.example.com
|
|
-http-address=http://0.0.0.0:4180
|
|
-email-domain=example.com
|
|
-provider=github
|
|
|
|
wekan:
|
|
image: wekanteam/wekan:latest
|
|
networks:
|
|
- internal
|
|
env_file: /var/data/wekan/wekan.env
|
|
|
|
networks:
|
|
traefik_public:
|
|
external: true
|
|
internal:
|
|
driver: overlay
|
|
ipam:
|
|
config:
|
|
- subnet: 172.16.3.0/24
|
|
```
|
|
|
|
!!! note
|
|
Setup unique static subnets for every stack you deploy. This avoids IP/gateway conflicts which can otherwise occur when you're creating/removing stacks a lot. See [my list](/reference/networks/) here.
|
|
|
|
|
|
|
|
## Serving
|
|
|
|
### Launch Wekan stack
|
|
|
|
Launch the Wekan stack by running ```docker stack deploy wekan -c <path -to-docker-compose.yml>```
|
|
|
|
Log into your new instance at https://**YOUR-FQDN**, with user "root" and the password you specified in gitlab.env.
|
|
|
|
[^1]: If you wanted to expose the Wekan UI directly, you could remove the oauth2_proxy from the design, and move the traefik_public-related labels directly to the wekan container. You'd also need to add the traefik_public network to the wekan container. |