summaryrefslogtreecommitdiff
path: root/docker
diff options
context:
space:
mode:
authorJonas Zohren <git-pbkyr@jzohren.de>2022-02-20 11:43:50 +0100
committerJonas Zohren <git-pbkyr@jzohren.de>2022-02-20 11:43:50 +0100
commit86162c2c20c04305c01a0d17430bb360e8ab9782 (patch)
tree749a2cd14f7bf73a80664f05b942cfe7ada3a415 /docker
parent57ac4160b75981b6354d69168fd506e96138d265 (diff)
parent199c84195a5721aed9aa1585f61a242d0cab5244 (diff)
downloadconduit-86162c2c20c04305c01a0d17430bb360e8ab9782.zip
Merge branch 'next' into docs
Diffstat (limited to 'docker')
-rw-r--r--docker/README.md29
-rw-r--r--docker/docker-compose.for-traefik.yml (renamed from docker/docker-compose.traefik.yml)0
-rw-r--r--docker/docker-compose.override.yml (renamed from docker/docker-compose.override.traefik.yml)0
-rw-r--r--docker/docker-compose.with-traefik.yml97
4 files changed, 119 insertions, 7 deletions
diff --git a/docker/README.md b/docker/README.md
index f9d94ab..c980adc 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -56,8 +56,18 @@ If you just want to test Conduit for a short time, you can use the `--rm` flag,
## Docker-compose
-If the docker command is not for you or your setup, you can also use one of the provided `docker-compose` files. Depending on your proxy setup, use the [`docker-compose.traefik.yml`](docker-compose.traefik.yml) and [`docker-compose.override.traefik.yml`](docker-compose.override.traefik.yml) for Traefik (don't forget to remove `.traefik` from the filenames) or the normal [`docker-compose.yml`](../docker-compose.yml) for every other reverse proxy. Additional info about deploying
-Conduit can be found [here](../DEPLOY.md).
+If the `docker run` command is not for you or your setup, you can also use one of the provided `docker-compose` files.
+
+Depending on your proxy setup, you can use one of the following files;
+- If you already have a `traefik` instance set up, use [`docker-compose.for-traefik.yml`](docker-compose.for-traefik.yml)
+- If you don't have a `traefik` instance set up (or any other reverse proxy), use [`docker-compose.with-traefik.yml`](docker-compose.with-traefik.yml)
+- For any other reverse proxy, use [`docker-compose.yml`](docker-compose.yml)
+
+When picking the traefik-related compose file, rename it so it matches `docker-compose.yml`, and
+rename the override file to `docker-compose.override.yml`. Edit the latter with the values you want
+for your server.
+
+Additional info about deploying Conduit can be found [here](../DEPLOY.md).
### Build
@@ -81,11 +91,16 @@ docker-compose up -d
### Use Traefik as Proxy
-As a container user, you probably know about Traefik. It is a easy to use reverse proxy for making containerized app and services available through the web. With the
-two provided files, [`docker-compose.traefik.yml`](docker-compose.traefik.yml) and [`docker-compose.override.traefik.yml`](docker-compose.override.traefik.yml), it is
-equally easy to deploy and use Conduit, with a little caveat. If you already took a look at the files, then you should have seen the `well-known` service, and that is
-the little caveat. Traefik is simply a proxy and loadbalancer and is not able to serve any kind of content, but for Conduit to federate, we need to either expose ports
-`443` and `8448` or serve two endpoints `.well-known/matrix/client` and `.well-known/matrix/server`.
+As a container user, you probably know about Traefik. It is a easy to use reverse proxy for making
+containerized app and services available through the web. With the two provided files,
+[`docker-compose.for-traefik.yml`](docker-compose.for-traefik.yml) (or
+[`docker-compose.with-traefik.yml`](docker-compose.with-traefik.yml)) and
+[`docker-compose.override.yml`](docker-compose.override.traefik.yml), it is equally easy to deploy
+and use Conduit, with a little caveat. If you already took a look at the files, then you should have
+seen the `well-known` service, and that is the little caveat. Traefik is simply a proxy and
+loadbalancer and is not able to serve any kind of content, but for Conduit to federate, we need to
+either expose ports `443` and `8448` or serve two endpoints `.well-known/matrix/client` and
+`.well-known/matrix/server`.
With the service `well-known` we use a single `nginx` container that will serve those two files.
diff --git a/docker/docker-compose.traefik.yml b/docker/docker-compose.for-traefik.yml
index ca560b8..ca560b8 100644
--- a/docker/docker-compose.traefik.yml
+++ b/docker/docker-compose.for-traefik.yml
diff --git a/docker/docker-compose.override.traefik.yml b/docker/docker-compose.override.yml
index 9525078..9525078 100644
--- a/docker/docker-compose.override.traefik.yml
+++ b/docker/docker-compose.override.yml
diff --git a/docker/docker-compose.with-traefik.yml b/docker/docker-compose.with-traefik.yml
new file mode 100644
index 0000000..6d46827
--- /dev/null
+++ b/docker/docker-compose.with-traefik.yml
@@ -0,0 +1,97 @@
+# Conduit - Behind Traefik Reverse Proxy
+version: '3'
+
+services:
+ homeserver:
+ ### If you already built the Conduit image with 'docker build' or want to use the Docker Hub image,
+ ### then you are ready to go.
+ image: matrixconduit/matrix-conduit:latest
+ ### If you want to build a fresh image from the sources, then comment the image line and uncomment the
+ ### build lines. If you want meaningful labels in your built Conduit image, you should run docker-compose like this:
+ ### CREATED=$(date -u +'%Y-%m-%dT%H:%M:%SZ') VERSION=$(grep -m1 -o '[0-9].[0-9].[0-9]' Cargo.toml) docker-compose up -d
+ # build:
+ # context: .
+ # args:
+ # CREATED: '2021-03-16T08:18:27Z'
+ # VERSION: '0.1.0'
+ # LOCAL: 'false'
+ # GIT_REF: origin/master
+ restart: unless-stopped
+ volumes:
+ - db:/srv/conduit/.local/share/conduit
+ ### Uncomment if you want to use conduit.toml to configure Conduit
+ ### Note: Set env vars will override conduit.toml values
+ # - ./conduit.toml:/srv/conduit/conduit.toml
+ networks:
+ - proxy
+ environment:
+ CONDUIT_SERVER_NAME: localhost:6167 # replace with your own name
+ CONDUIT_TRUSTED_SERVERS: '["matrix.org"]'
+ CONDUIT_ALLOW_REGISTRATION : 'true'
+ ### Uncomment and change values as desired
+ # CONDUIT_ADDRESS: 0.0.0.0
+ # CONDUIT_PORT: 6167
+ # CONDUIT_CONFIG: '/srv/conduit/conduit.toml' # if you want to configure purely by env vars, set this to an empty string ''
+ # Available levels are: error, warn, info, debug, trace - more info at: https://docs.rs/env_logger/*/env_logger/#enabling-logging
+ # CONDUIT_LOG: info # default is: "info,_=off,sled=off"
+ # CONDUIT_ALLOW_JAEGER: 'false'
+ # CONDUIT_ALLOW_ENCRYPTION: 'false'
+ # CONDUIT_ALLOW_FEDERATION: 'false'
+ # CONDUIT_DATABASE_PATH: /srv/conduit/.local/share/conduit
+ # CONDUIT_WORKERS: 10
+ # CONDUIT_MAX_REQUEST_SIZE: 20_000_000 # in bytes, ~20 MB
+
+ # We need some way to server the client and server .well-known json. The simplest way is to use a nginx container
+ # to serve those two as static files. If you want to use a different way, delete or comment the below service, here
+ # and in the docker-compose override file.
+ well-known:
+ image: nginx:latest
+ restart: unless-stopped
+ volumes:
+ - ./nginx/matrix.conf:/etc/nginx/conf.d/matrix.conf # the config to serve the .well-known/matrix files
+ - ./nginx/www:/var/www/ # location of the client and server .well-known-files
+
+ ### Uncomment if you want to use your own Element-Web App.
+ ### Note: You need to provide a config.json for Element and you also need a second
+ ### Domain or Subdomain for the communication between Element and Conduit
+ ### Config-Docs: https://github.com/vector-im/element-web/blob/develop/docs/config.md
+ # element-web:
+ # image: vectorim/element-web:latest
+ # restart: unless-stopped
+ # volumes:
+ # - ./element_config.json:/app/config.json
+ # networks:
+ # - proxy
+ # depends_on:
+ # - homeserver
+
+ traefik:
+ image: "traefik:latest"
+ container_name: "traefik"
+ restart: "unless-stopped"
+ ports:
+ - "80:80"
+ - "443:443"
+ volumes:
+ - "/var/run/docker.sock:/var/run/docker.sock"
+ # - "./traefik_config:/etc/traefik"
+ - "acme:/etc/traefik/acme"
+ labels:
+ - "traefik.enable=true"
+
+ # middleware redirect
+ - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
+ # global redirect to https
+ - "traefik.http.routers.redirs.rule=hostregexp(`{host:.+}`)"
+ - "traefik.http.routers.redirs.entrypoints=http"
+ - "traefik.http.routers.redirs.middlewares=redirect-to-https"
+
+ networks:
+ - proxy
+
+volumes:
+ db:
+ acme:
+
+networks:
+ proxy: \ No newline at end of file