17 Commits
Author SHA1 Message Date
marc 6beb13e21d tried new mc location 2021-05-25 18:03:08 +02:00
marc 42611ca3b7 prebuilt open web calendar image 2021-05-22 17:08:24 +02:00
marc 627a6ee08b merging with master with no buld version 2021-05-21 15:28:53 +02:00
marc e2278a2755 trying to add working dir again 2021-05-21 01:33:37 +00:00
marc f322ac85b7 dev conf 2021-05-21 01:33:25 +00:00
marc 13c977c75f opening oxiva db 2021-05-15 20:20:36 +00:00
marc e00a526f9c tmate server maybe? 2021-05-11 15:42:26 +00:00
marc a2fa1ef770 listening on all interfaces 2021-05-09 22:46:01 +00:00
marc ba2e808a46 higher gitea upload limit 2021-05-09 12:04:15 +00:00
marc 0729e6d2c8 creating superuser if it can 2021-05-09 00:56:23 +00:00
marc 9cd471a12d higher upload size oxivia 2021-05-08 23:51:59 +00:00
marc ec77a3ea36 jenkins 2021-05-08 23:50:59 +00:00
marc 6567ed84ca jenkins with right docker 2021-05-05 22:05:59 +00:00
marc 1e80baeaa4 jenkins for ci/cd 2021-05-05 21:35:35 +00:00
marc cf8f1ea43b no build 2021-05-05 20:07:53 +02:00
marc 5d28e85a0a dockerapi 2021-05-02 22:27:17 +00:00
marc 1c31789424 docker api 2021-05-02 03:38:18 +00:00
9 changed files with 188 additions and 62 deletions
+30
View File
@@ -0,0 +1,30 @@
server {
listen 443 ssl http2;
server_name dev.marcpartensky.com;
# ssl keys + letsencrypt
ssl_certificate /etc/letsencrypt/live/dev.marcpartensky.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/dev.marcpartensky.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
# logs
access_log /var/log/nginx/reverse-access.log;
error_log /var/log/nginx/reverse-error.log;
location /.well-known/acme-challenge/ {
allow all;
root /var/www/certbot;
}
location / {
proxy_pass http://marcpartensky.com:8000;
# proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
+30
View File
@@ -0,0 +1,30 @@
# server {
# listen 443 ssl http2;
# server_name docker.marcpartensky.com;
# # ssl keys + letsencrypt
# ssl_certificate /etc/letsencrypt/live/docker.marcpartensky.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/docker.marcpartensky.com/privkey.pem;
# include /etc/letsencrypt/options-ssl-nginx.conf;
# ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
# # logs
# access_log /var/log/nginx/reverse-access.log;
# error_log /var/log/nginx/reverse-error.log;
# location /.well-known/acme-challenge/ {
# allow all;
# root /var/www/certbot;
# }
# location /docs {
# proxy_pass http://docker;
# # proxy_redirect off;
# proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Proto https;
# }
# }
+2
View File
@@ -2,6 +2,8 @@ server {
listen 443 ssl http2;
server_name git.marcpartensky.com;
client_max_body_size 10G;
# ssl keys + letsencrypt
ssl_certificate /etc/letsencrypt/live/git.marcpartensky.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/git.marcpartensky.com/privkey.pem;
+30
View File
@@ -0,0 +1,30 @@
server {
listen 443 ssl http2;
server_name jenkins.marcpartensky.com;
# ssl keys + letsencrypt
ssl_certificate /etc/letsencrypt/live/jenkins.marcpartensky.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/jenkins.marcpartensky.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
# logs
access_log /var/log/nginx/reverse-access.log;
error_log /var/log/nginx/reverse-error.log;
location /.well-known/acme-challenge/ {
allow all;
root /var/www/certbot;
}
location / {
proxy_pass http://jenkins:8080;
# proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
+1 -1
View File
@@ -2,7 +2,7 @@ server {
listen 443 ssl http2;
server_name oxivia.business.marcpartensky.com;
client_max_body_size 10M;
client_max_body_size 30M;
# ssl keys + letsencrypt
ssl_certificate /etc/letsencrypt/live/oxivia.business.marcpartensky.com/fullchain.pem;
+24 -24
View File
@@ -1,30 +1,30 @@
server {
listen 443 ssl http2;
server_name panel.marcpartensky.com;
# server {
# listen 443 ssl http2;
# server_name panel.marcpartensky.com;
# ssl keys + letsencrypt
ssl_certificate /etc/letsencrypt/live/panel.marcpartensky.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/panel.marcpartensky.com/privkey.pem;
# # ssl keys + letsencrypt
# ssl_certificate /etc/letsencrypt/live/panel.marcpartensky.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/panel.marcpartensky.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
# include /etc/letsencrypt/options-ssl-nginx.conf;
# ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
# logs
access_log /var/log/nginx/reverse-access.log;
error_log /var/log/nginx/reverse-error.log;
# # logs
# access_log /var/log/nginx/reverse-access.log;
# error_log /var/log/nginx/reverse-error.log;
location /.well-known/acme-challenge/ {
allow all;
root /var/www/certbot;
}
# location /.well-known/acme-challenge/ {
# allow all;
# root /var/www/certbot;
# }
location / {
proxy_pass http://panel;
# proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
# location / {
# proxy_pass http://panel;
# # proxy_redirect off;
# proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Proto https;
# }
# }
+1 -1
View File
@@ -1,5 +1,5 @@
file_uploads = On
memory_limit = 500M
upload_max_filesize = 10M
upload_max_filesize = 30M
post_max_size = 500M
max_execution_time = 600
+70 -36
View File
@@ -52,7 +52,7 @@ services:
ports:
- "80:80"
- "443:443"
- "2222:2222"
# - "2222:2222"
volumes:
- ./data/nginx:/etc/nginx/conf.d
- /etc/letsencrypt:/etc/letsencrypt
@@ -116,11 +116,6 @@ services:
website:
image: marcpartensky/website
restart: unless-stopped
build:
context: /root/git/website
dockerfile: /root/git/website/Dockerfile
args:
env_file: /root/git/website/.env
env_file:
- ./data/secrets/website.env
environment:
@@ -131,8 +126,9 @@ services:
tty: true
# - ./manage.py collectstatic --noinput
entrypoint: >
sh -c "python manage.py migrate;
daphne django_project.asgi:application --port 80 --bind website -v2"
sh -c "./manage.py migrate;
./manage.py createsuperuser --noinput;
daphne django_project.asgi:application --port 80 --bind 0.0.0.0 -v2"
# entrypoint: "daphne -e ssl:7000:privateKey=$$KEY:certKey=$$CERT django_project.asgi:application"
# entrypoint: daphne -b website -e ssl:443:privateKey=/app/privkey.pem:certKey=/app/fullchain.pem django_project.asgi:application
links:
@@ -188,21 +184,22 @@ services:
esclave:
image: marcpartensky/discord-bot
restart: unless-stopped
build: /root/git/discord-bot
networks:
- discord
env_file:
- ./data/secrets/esclave.env
ia:
image: marcpartensky/discord-bot
restart: unless-stopped
build: /root/git/discord-bot
networks:
- discord
env_file:
- ./data/secrets/ia.env
esclave2:
image: marcpartensky/discord-bot
restart: unless-stopped
build: /root/git/discord-bot
env_file:
- ./data/secrets/esclave2.env
networks:
@@ -218,16 +215,22 @@ services:
env_file:
- ./data/secrets/discord_bot_mongo.env
docker_api:
image: marcpartensky/docker-api
restart: unless-stopped
volumes:
- /var/run/docker.sock:/var/run/docker.sock
networks:
- discord
servant:
image: marcpartensky/servitor
restart: unless-stopped
build: /root/git/servitor
pandoc:
build: /root/git/pandoc-api
image: marcpartensky/pandoc-api
restart: unless-stopped
# working_dir: /app
working_dir: /app
env_file:
- ./data/secrets/pandoc.env
entrypoint: "flask run --host pandoc --port 80"
@@ -277,17 +280,18 @@ services:
- ONLINE_MODE=FALSE # no need for an account
- DIFFICULTY=hard
- VIEW_DISTANCE=32
- GID=1002
- UID=1002
# - WORLD=/srv/minecraft/zip/Server.zip
# - SNOOPER_ENABLED=false
tty: true
stdin_open: true
volumes:
- /srv/minecraft/data/:/data
- ~/.minecraft/minecraft/data/:/data:Z
ports:
- "25565:25565"
# pterodactyl:
# build: /root/fork/panel
# restart: unless-stopped
# networks:
# - nginx
@@ -312,11 +316,6 @@ services:
# env:
# image: marcpartensky/env
# build:
# context: /root/git/dotfiles
# dockerfile: /root/git/dotfiles/Dockerfile
# args:
# env_file: /root/git/dotfiles/.env
# ports:
# - "22:7020"
# - "8022:7021"
@@ -361,9 +360,6 @@ services:
image: marcpartensky/ialab
user: nobody
restart: unless-stopped
build:
context: /root/git/ialab
dockerfile: /root/git/ialab/Dockerfile
environment:
- FLASK_APP=server.py
# - FLASK_APP=/app/server.py
@@ -380,11 +376,9 @@ services:
- nginx
open_web_calendar:
working_dir: /app
image: marcpartensky/open_web_calendar
restart: unless-stopped
build:
context: /root/fork/open-web-calendar
dockerfile: /root/fork/open-web-calendar/Dockerfile
working_dir: /app
environment:
- HOST=open_web_calendar
- PORT=80
@@ -462,6 +456,8 @@ services:
restart: unless-stopped
env_file:
- data/secrets/oxivia.env
ports:
- "3307:3306"
volumes:
- /srv/oxivia_mysql:/var/lib/mysql
networks:
@@ -520,9 +516,6 @@ services:
todolist:
image: marcpartensky/je-todoapp-react
restart: unless-stopped
build:
context: /root/je/todoapp/react
dockerfile: /root/je/todoapp/react/Dockerfile
environment:
- PORT=80
- SPRING_API_URL=https://api.todolist.marcpartensky.com
@@ -535,9 +528,6 @@ services:
todolist_api:
image: marcpartensky/je-todoapp-spring-api
restart: unless-stopped
build:
context: /root/je/todoapp/spring-api
dockerfile: /root/je/todoapp/spring-api/Dockerfile
env_file:
- ./data/secrets/todolist.env
environment:
@@ -656,12 +646,18 @@ services:
volumes:
- /srv/archlinux:/root
windows:
image: mcr.microsoft.com/windows:1903
restart: unless-stopped
stdin_open: true
tty: true
volumes:
- /srv/windows:/root
healingpath:
image: marcpartensky/brainperformer
restart: unless-stopped
# user: healingpath
build:
context: /root/git/brainperformer
env_file: ./data/secrets/healingpath.env
networks:
- healingpath
@@ -679,6 +675,44 @@ services:
networks:
- healingpath
# jenkins_docker:
# image: docker:dind
# privileged: true
# networks:
# - jenkins
# environment:
# DOCKER_TLS_CERTDIR: certs
# volumes:
# - /srv/jenkins_docker/certs:/certs/client
# - /srv/jenkins_docker/data:/var/jenkins_home
# ports:
# - "2376:2376"
jenkins:
image: jenkins/jenkins:lts
privileged: true
user: root
ports:
# - "8080:8080"
- "50000:50000"
volumes:
- /srv/jenkins:/var/jenkins_home
- /var/run/docker.sock:/var/run/docker.sock
- /usr/bin/docker:/usr/bin/docker
networks:
- nginx
tmate:
image: tmate/tmate-ssh-server
ports:
- "7027:22"
volumes:
- ~/.ssh:/root/.ssh:ro
environment:
SSH_KEYS_PATH: ~/.ssh
SSH_HOSTNAME: marcpartensky.com
SSH_PORT_LISTEN: 22
volumes:
letsencrypt:
nextcloud:
BIN
View File
Binary file not shown.