Home

Welcome to the vitkutny.cz wiki!

Production

nginx-proxy

docker network create nginx-proxy

~$ cat docker-compose.yml

version: '3'

services:
  nginx-proxy:
    image: jwilder/nginx-proxy
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
#vhost conf
      - /home/vitkutny/vhost.d:/etc/nginx/vhost.d
#vitkutny.cz
      - /etc/letsencrypt/live/vitkutny.cz/privkey.pem:/etc/nginx/certs/vitkutny.cz.key
      - /etc/letsencrypt/live/vitkutny.cz/fullchain.pem:/etc/nginx/certs/vitkutny.cz.crt
#kutny.cz
      - /etc/letsencrypt/live/vitkutny.cz/privkey.pem:/etc/nginx/certs/kutny.cz.key
      - /etc/letsencrypt/live/vitkutny.cz/fullchain.pem:/etc/nginx/certs/kutny.cz.crt
    restart: always

networks:
  default:
    external:
      name: nginx-proxy

~$ cat vhost.d/www.vitkutny.cz

return 301 https://vitkutny.cz$request_uri;

~$ cat vhost.d/kutny.cz

return 301 https://vitkutny.cz$request_uri;

~$ cat vhost.d/www.kutny.cz

return 301 https://vitkutny.cz$request_uri;

crontab

~$ crontab -l

0 0 * * *       sudo docker-compose down && sudo certbot renew && sudo docker-compose up -d

sudoers

~$ cat /etc/sudoers.d/certbot

Cmnd_Alias CERTBOT = /usr/bin/certbot *
%sudo ALL=(root) NOPASSWD: CERTBOT

~$ cat /etc/sudoers.d/docker-compose

Cmnd_Alias DOCKER_COMPOSE = /usr/local/bin/docker-compose *
%sudo ALL=(root) NOPASSWD: DOCKER_COMPOSE