mirror of
https://github.com/ether/etherpad-lite.git
synced 2025-05-09 16:35:01 -04:00
1714ff6116
* chore: Add docker compose file for production * chore: Ignoring unnecessary files after initial docker-compose setup for production environment * chore: Switch to mariadb * chore: Enable ssl connection for mariadb * chore: Add ETHERPAD_PLUGINS and more env vars from the kitsteam * chore: Add config for etherpad plugin ep_delete_after_delay * chore: Finalize brnach * chore: Fix wrong chartset passed to etherpad and ueberdb2 config * docs: Add kits-specific documentation for database migration Co-authored-by: Gerardo Navarro <gerardo@b310.de>
76 lines
No EOL
3.1 KiB
YAML
76 lines
No EOL
3.1 KiB
YAML
version: "3.8"
|
|
|
|
# Add this file to extend the docker-compose setup, e.g.:
|
|
# docker-compose -f docker-compose-prod.yml -f docker-compose-prod.override.yml --env-file .env.prod build --no-cache
|
|
# docker-compose -f docker-compose-prod.yml -f docker-compose-prod.override.yml --env-file .env.prod up -d --build --force-recreate
|
|
|
|
services:
|
|
app_prod:
|
|
build:
|
|
context: .
|
|
args:
|
|
ETHERPAD_PLUGINS: >-
|
|
ep_comments_page
|
|
ep_image_upload
|
|
kitsteam/ep_push2delete
|
|
ep_embedded_hyperlinks2
|
|
ep_headings2
|
|
ep_align
|
|
ep_font_color
|
|
ep_delete_empty_pads
|
|
ep_delete_after_delay
|
|
ep_helmet
|
|
ep_font_size
|
|
ep_disable_imports
|
|
INSTALL_SOFFICE: 'true'
|
|
depends_on:
|
|
- mariadb_prod
|
|
environment:
|
|
DB_CHARSET: ${DOCKER_COMPOSE_APP_PROD_ENV_DB_CHARSET:-utf8mb4}
|
|
DB_HOST: mariadb_prod
|
|
DB_NAME: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_DATABASE:?}
|
|
DB_PASS: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_PASSWORD:?}
|
|
DB_PORT: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_PORT:-3306}
|
|
DB_TYPE: "mysql"
|
|
DB_USER: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_USER:?}
|
|
DEFAULT_PAD_TEXT: ${DOCKER_COMPOSE_APP_PROD_ENV_DEFAULT_PAD_TEXT}
|
|
DISABLE_IP_LOGGING: ${DOCKER_COMPOSE_APP_PROD_ENV_DISABLE_IP_LOGGING:-true}
|
|
SOFFICE: ${DOCKER_COMPOSE_APP_PROD_ENV_SOFFICE:-/usr/bin/soffice}
|
|
TRUST_PROXY: ${DOCKER_COMPOSE_APP_PROD_ENV_TRUST_PROXY:-true}
|
|
ports:
|
|
- "${DOCKER_COMPOSE_APP_PROD_PORT_PUBLISHED:-9001}:${DOCKER_COMPOSE_APP_PROD_PORT_TARGET:-9001}"
|
|
|
|
mariadb_prod:
|
|
image: mariadb
|
|
# Pass config parameters to the mysql server.
|
|
# Find more information below when you need to generate the ssl-relevant file your self
|
|
command:
|
|
- --character-set-server=utf8mb4
|
|
- --collation-server=utf8mb4_bin
|
|
- --ssl_cert=/var/lib/mysql/server.crt
|
|
- --ssl_key=/var/lib/mysql/server.key
|
|
environment:
|
|
MARIADB_DATABASE: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_DATABASE:?}
|
|
MARIADB_PASSWORD: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_PASSWORD:?}
|
|
MARIADB_PORT: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_PORT:-3306}
|
|
MARIADB_RANDOM_ROOT_PASSWORD: 'yes'
|
|
MARIADB_USER: ${DOCKER_COMPOSE_MARIADB_PROD_ENV_MARIADB_USER:?}
|
|
volumes:
|
|
# To setup an ssl-enabled mysql server locally, you need to generate a self-signed ssl certificate.
|
|
#
|
|
# ```bash
|
|
# mkdir -p ./ca
|
|
# openssl req -new -text -passout pass:abcd -subj /CN=localhost -out ./ca/server.req -keyout ./ca/privkey.pem
|
|
# openssl rsa -in ./ca/privkey.pem -passin pass:abcd -out ./ca/server.key
|
|
# openssl req -x509 -in ./ca/server.req -text -key ./ca/server.key -out ./ca/server.crt
|
|
# chmod 600 ./ca/server.key
|
|
# test $(uname -s) = Linux && chown 70 ./ca/server.key
|
|
# ```
|
|
#
|
|
# Afterwards, the ssl_cert_file and ssl_key_file are mounted into the docker container, see below
|
|
- ./ca/server.crt:/var/lib/mysql/server.crt
|
|
- ./ca/server.key:/var/lib/mysql/server.key
|
|
- mariadb_prod_data:/var/lib/mysql
|
|
|
|
volumes:
|
|
mariadb_prod_data: |