109 lines
3.1 KiB
Markdown
109 lines
3.1 KiB
Markdown
# Docker
|
|
|
|
## Setup Docker EasyHAProxy
|
|
|
|
This method will use a static configuration, simpler and easier than HAProxy to create the `haproxy.cfg`
|
|
|
|
You can use this configuration to setup external servers not related to docker or kubernetes.
|
|
|
|
Another advantage is that EasyHAProxy will monitor for changes in this file and automatically reconfigure HAProxy and changes are detected.
|
|
|
|
First, Create a YAML:
|
|
|
|
```yaml
|
|
stats:
|
|
username: admin
|
|
password: password
|
|
port: 1936 # Optional (default 1936)
|
|
|
|
customerrors: true # Optional (default false)
|
|
|
|
ssl_mode: default
|
|
|
|
letsencrypt: {
|
|
"email": "acme@example.org"
|
|
}
|
|
|
|
easymapping:
|
|
- port: 80
|
|
hosts:
|
|
host1.com.br:
|
|
containers:
|
|
- container:5000
|
|
letsencrypt: true
|
|
redirect_ssl: true
|
|
host2.com.br:
|
|
containers:
|
|
- other:3000
|
|
redirect:
|
|
www.host1.com.br: http://host1.com.br
|
|
|
|
- port: 443
|
|
hosts:
|
|
host1.com.br:
|
|
containers:
|
|
- container:80
|
|
redirect_ssl: false
|
|
ssl: true
|
|
|
|
- port: 8080
|
|
hosts:
|
|
host3.com.br:
|
|
containers:
|
|
- domain:8181
|
|
```
|
|
|
|
Then map this file to `/etc/haproxy/easyconfig.yml` in your EasyHAProxy container as:
|
|
|
|
```bash
|
|
docker run -d \
|
|
--name easy-haproxy-container \
|
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
|
-v /my/config.yml:/etc/haproxy/easyconfig.yml
|
|
-e EASYHAPROXY_DISCOVER="static" \
|
|
# + Environment Variables \
|
|
-p 80:80 \
|
|
-p 443:443 \
|
|
-p 1936:1936 \
|
|
--network easyhaproxy
|
|
byjg/easy-haproxy
|
|
```
|
|
|
|
You can find other informations on [docker label configuration](container-labels.md) and [docker container environment](docker-environment.md)
|
|
|
|
## Yaml Definition
|
|
|
|
```yaml
|
|
stats:
|
|
username: admin # Optional (default "admin")
|
|
password: password # If stats or stats.password is omitted, stats will be public with no password
|
|
port: 1936 # Optional (default 1936)
|
|
|
|
customerrors: true # Optional (default false)
|
|
|
|
ssl_mode: default # Optional
|
|
|
|
letsencrypt: { # Optional. If you enable `letsencrypt` will need to setu0p this,
|
|
# otherwise the certificate will be issued
|
|
"email": "acme@example.org"
|
|
}
|
|
|
|
easymapping:
|
|
- port: 80 # Listen port
|
|
mode: http # Optional. Default `http`. Can be http or tcp
|
|
hosts:
|
|
host1.com.br: # Hostname
|
|
containers:
|
|
- container:5000 # Endpoints of the hostname above (ip, dns, container, etc)
|
|
letsencrypt: true # Optional. it will request a letsencrypt certiticate
|
|
redirect_ssl: true # Optional. It will redirect this site to it SSL.
|
|
ssl: true # Optional. Inform this port will listen to SSL, instead of HTTP
|
|
clone_to_ssl: true # Optional. Default False. You clone these hosts to it equivalent SSL.
|
|
redirect:
|
|
www.host1.com.br: http://host1.com.br
|
|
```
|
|
|
|
*Note*: The only way to pass SSL certificates is to map the certificates to EasyHAProxy as a docker volume. Refer to the [SSL documentation](ssl.md) to learn how to do it.
|
|
|
|
----
|
|
[Open source ByJG](http://opensource.byjg.com)
|