taufiqpsumarna

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ecr:GetDownloadUrlForLayer",
                "ecr:BatchGetImage",
                "ecr:BatchCheckLayerAvailability",
                "ecr:PutImage",

taufiqpsumarna

#!/bin/bash

echo "Update repository and upgrade package"
apt update && apt upgrade -y

echo "Install Docker Package"
curl -fsSLv https://releases.rancher.com/install-docker/24.0.9.sh | sudo bash
sudo systemctl enable docker.service
sudo systemctl enable containerd.service

taufiqpsumarna

concurrent = 4
check_interval = 0

[[runners]]
  name = "gitlab-runner-autoscaler"
  url = "https://gitlab.com" #TODO_1: Change with your gitlab repository URL
  token = "" #TODO_2: Fill with your Gitlab Token
  executor = "docker+machine"
  limit = 4
  [runners.docker]

taufiqpsumarna

#!/bin/bash

echo "Update repository and upgrade package"
apt update && apt upgrade -y

echo "Install Docker Package"
curl -fsSLv https://releases.rancher.com/install-docker/20.10.24.sh | sudo bash
sudo systemctl enable docker.service
sudo systemctl enable containerd.service

taufiqpsumarna

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:*",
                "eks:*",
                "elasticloadbalancing:*",

taufiqpsumarna

#!/usr/bin/env bash
# http://redsymbol.net/articles/unofficial-bash-strict-mode/

#########################################################################################
#  SCRIPT: clear-docker-cache.sh
#  Description: Used to cleanup unused docker containers and volumes
#  Source: https://gitlab.com/gitlab-org/gitlab-runner/blob/main/packaging/root/usr/share/gitlab-runner/clear-docker-cache
######################################################################################
IFS=$'\n\t'
set -euo pipefail

taufiqpsumarna

Code Server Docker Compose File

Run VS Code on any machine anywhere and access it through the browser.

Code anywhere: Code on your Chromebook, tablet, and laptop with a consistent dev environment. Develop on a Linux machine and pick up from any device with a web browser. Server-powered: Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. Preserve battery life when you're on the go since all intensive tasks runs on your server. Make use of a spare computer you have lying around and turn it into a full development environment. See https://github.com/cdr/code-server for more docs.

Dockerhub: https://hub.docker.com/r/codercom/code-server

taufiqpsumarna

image: node:alpine3.17

stages:
  - Build
  - Test
  - Deploy

variables:
  SERVER_WEB_PATH: /var/www/apps/

taufiqpsumarna

Reference used

https://www.acunetix.com/blog/web-security-zone/hardening-nginx/

Nginx Template

https://raw.githubusercontent.com/taufiqpsumarna/MERN-Docker-Production-Boilerplate/main/frontend/docker-setup/nginx/mern-template.conf

taufiqpsumarna

# to generate your dhparam.pem file, run in the terminal
openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048