ismailyenigul

#modifed version of docker-compose.yml from https://github.com/deviantony/docker-elk
# I will write an article about this later.
version: '2'

services:

  elasticsearch:
    build:
      context: elasticsearch/

ismailyenigul

       --label "traefik.enable=true" \
        --label "traefik.protocol=http" \
 	     --label "traefik.first.port=80" \
  		 --label "traefik.first.frontend.rule=Host:web1.example.com" \
 	     --label "traefik.second.port=8080" \
  		 --label "traefik.second.frontend.rule=Host:web2.example.com" \
  	
    
 Above labels will allow us to forward web1.example.com to docker container port 80 and web2.example.com to same container's port 8080

ismailyenigul

1. create a network with docker network create NETWORKNAME
2. Create letsencrypt directory for acme.json ie /docker/letsencrypt directory or somewhere else mkdir -p /docker/letsencrypt
3. I configured http -> https redirect
# cat docker-compose.yml

version: '3.3'

services:
  traefik2:
    image: traefik

ismailyenigul

#1. Create a volume directory for nexus-data. I used /nexus-data directory which is mount point of the second disk 
# mkdir /nexus-data
# chown -R 200 /nexus-data  #nexus user id 200 in dockerfile
#Create a letsencrypt directory to store traefik acme.json file which keeps SSL certs
# mkdir -p /docker/letsencrypt

#Change NEXUS.mydomain.com with your domain name.
#Change acme.email=MYEMAIL@gmail.com

# cat docker-compose.yml 

ismailyenigul

I choosed host path mapping for postgresql data directory in a separate OS disk to be able to resize partition later.
You can use docker standart volumes too.

# mkdir -p /data/timescaledb

# cat docker-compose.yml 
version: '3'

services:

ismailyenigul

# docker network create nextcloud

NOTES:
1. certificatesresolvers.myresolver.acme.email=myemail@gmail.com 
2. TRUSTED_PROXIES values based on your 'nexcloud network'
3. remove traefik.http.middlewares.nextcloud.headers.contentSecurityPolicy and  
traefik.http.middlewares.nextcloud.headers.customFrameOptionsValue if you don't want to allow iframe your domain
3

# cat docker-compose.yml

ismailyenigul

## Trafik Multi Network Deployment

1. Create Traefik network

` # docker network  create --driver=bridge --attachable --internal=false traefik `

2. Edit `traefik2/docker-compose.yml`
    - Change ACME email
    - Change --providers.docker.network=traefik value if you created different network then `traefik`

ismailyenigul

Configure AlphaSSL on nginx web server

1- Create CA bundle file

# cat yourdomain.crt intermadiate-cert.crt root.pem > /etc/ssl/ca-bundle.pem

1. yourdomain.crt is the crt you got from SSL provider via email

2. intermadiate-cert.crt is SHA-256 - Orders March 31, 2014 and After at https://www.alphassl.com/support/install-root-certificate.html

3. root.pem from https://www.alphassl.com/support/roots/root.pem

ismailyenigul

on Bash

$ brew install bash-completion
$ kubectl completion ~/.kubectl-bash
$ echo ". /usr/local/etc/profile.d/bash_completion.sh" >> ~/.bash_profile
$ echo ". ~/.kubectl-bash"  >> ~/.bash_profile
$ source  ~/.bash_profile

ismailyenigul

install swaks

apt install -y swaks

send test message

swaks  --from sender@domain.com --to rcptuser@domain.com --auth-user myuser --auth-password "mypass"  --server  email-smtp.eu-west-1.amazonaws.com  --tlsc

Options