ohmydevops

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

• at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
• check nginx -V for the following:

  ...
  TLS SNI support enabled

ohmydevops

اینجا سعی کردم خلاصه مباحث مرتبط بین لینوکس و کانتینر‌ها رو به واسطه تدریس در دوره آموزشی داکر گرین‌وب، گردآوری کنم.

جزییات دوره: https://evnd.co/l2PJx

Containers

• First, read this concept: https://fen.wikipedia.org/wiki/OS-level_virtualization
• Many people use container systems like Docker, but how do they work? https://bit.ly/3fLhb58

ohmydevops

version: '3.8'

services:
  registry:
    restart: always
    image: registry:2.7.1
    container_name: registry
    environment:
      REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
      REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm

ohmydevops

# For more information: https://laravel.com/docs/sail
version: '3'
services:
    laravel.test:
        container_name: sail-laravel
        build:
            context: ./vendor/laravel/sail/runtimes/7.4
            dockerfile: Dockerfile
            args:
                WWWGROUP: '${WWWGROUP}'

ohmydevops

### I got the idea from here:
### https://stackoverflow.com/questions/39514293/docker-nginx-proxy-how-to-route-traffic-to-different-container-using-path-and-n


version: '3.8'

services:
  nginx-proxy:
    image: jwilder/nginx-proxy:alpine
    ports:

ohmydevops

FROM gliderlabs/alpine:3.3

ENV FFMPEG_VERSION=4.0.5

WORKDIR /tmp/ffmpeg

RUN apk add --update build-base curl file nasm tar bzip2 \
  zlib-dev openssl-dev yasm-dev lame-dev libogg-dev x264-dev libvpx-dev libvorbis-dev x265-dev freetype-dev libass-dev libwebp-dev rtmpdump-dev libtheora-dev opus-dev && \
  DIR=$(mktemp -d) && cd ${DIR} && \
  curl -s http://ffmpeg.org/releases/ffmpeg-${FFMPEG_VERSION}.tar.gz | tar zxvf - -C . && \

ohmydevops

version: '3'
services:

  drone-server:
    container_name: drone-server
    image: drone/drone:1.6
    volumes:
      - ./drone_data:/var/lib/drone/
      - /var/run/docker.sock:/var/run/docker.sock
    ports:

ohmydevops

• apiVersion: Which version of the Kubernetes API you’re using to create this object
• kind: What kind of object you want to create
• metadata: Data that helps uniquely identify the object, including a name string, UID, and optional namespace
• spec: What state you desire for the object

ohmydevops

apiVersion: apps/v1 # for versions before 1.9.0 use apps/v1beta2
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2 # tells deployment to run 2 pods matching the template
  template:

ohmydevops

#! /bin/bash

# clear screen!
clear

# change Time zone to tehran in current process
TZ=Asia/Tehran

# ask for gitea backup directory on your machine
echo -n "Enter gitea backup full path (example: /var/log/gitea/): "