redmine, MySQL, phpMyAdmin とりあえず構築用 (日本語対応)

1_redmine_japaneses_docker-compose.yml

version: '3.7'
volumes:
  mysql:
  redminefiles:
networks:
  redmine:
services:
  redmine:
    image: redmine:4.2
    restart: always
    networks:
      - redmine
    ports:
      - 8080:3000
    depends_on:
      - mysql
    environment:
      TZ: 'Asia/Tokyo'
      REDMINE_DB_MYSQL: mysql
      REDMINE_DB_DATABASE: redmine
      REDMINE_DB_USERNAME: redmine
      REDMINE_DB_PASSWORD: password
      REDMINE_DB_ENCODING: utf8mb4
      REDMINE_SECRET_KEY_BASE: secret
    volumes:
      - /docker_store/redmine/log:/usr/src/redmine/log
      - /docker_store/redmine/plugins:/usr/src/redmine/plugins
      - /docker_store/redmine/themes:/usr/src/redmine/public/themes
      - redminefiles:/usr/src/redmine/files
  mysql:
    image: mysql:5.7
    command: ['mysqld', '--character-set-server=utf8mb4', '--collation-server=utf8mb4_unicode_ci']
    restart: always
    networks:
      - redmine
    environment:
      TZ: 'Asia/Tokyo'
      MYSQL_DATABASE: redmine
      MYSQL_USER: redmine
      MYSQL_PASSWORD: password
      MYSQL_ROOT_PASSWORD: password
    volumes:
      - mysql:/var/lib/mysql
  phpmyadmin:
    image: phpmyadmin/phpmyadmin
    networks:
      - redmine
    ports:
      - 8899:80
    depends_on:
      - mysql
    environment:
      PMA_ARBITRARY: 1
      PMA_HOSTS: mysql
      PMA_USER: redmine

2_make.sh

mkdir -p /docker_store/redmine/log
mkdir -p /docker_store/redmine/plugins
mkdir -p /docker_store/redmine/themes

docker-compose up -d

3_crontab

00 02 * * * /usr/bin/certbot renew && service nginx restart

nginx.conf

upstream backend {
    server localhost:8080;
}

server {
    listen         80;
    server_name    redmine.jvx.jp;
    add_header     Strict-Transport-Security "max-age=31536000; includeSubdomains";

    location ^~ /.well-known {
        root /usr/share/nginx/html;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen         443 ssl;
    server_name    redmine.jvx.jp;

    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off;

    ssl_dhparam /etc/ssl/dhparam.pem;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers on;

    ssl_certificate     /etc/letsencrypt/live/redmine.jvx.jp/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/redmine.jvx.jp/privkey.pem;

    location / {
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto https;
        proxy_pass http://backend/;
    }
}

password, secretは変更必須