From e1958fb22470112ac64e9e18e31a8e54ccd30c7c Mon Sep 17 00:00:00 2001 From: Eric Doughty-Papassideris Date: Wed, 6 Mar 2024 10:07:05 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=A9=B9=20tdrive-node=20Dockerfile:=20swit?= =?UTF-8?q?ch=20to=20alpine=20base=20image=20(and=20remove=20Mac=20libc=20?= =?UTF-8?q?thing)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docker-compose.yml | 25 +++++++++++++++++++++++-- 1 file changed, 23 insertions(+), 2 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 6fdd158d..4e6994f1 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -30,8 +30,26 @@ services: image: twakedrive/tdrive-frontend environment: - DEV=production - - SSL_CERTS=selfsigned - NODE_HOST=http://tdrive_node:4000 + # Do not use SSL. Just connect to port 80: + # - SSL_CERTS=off + # + # Or generate a self signed certificate, for host `$SSL_SUBJ_CN` (default: `localhost`) + # unless one exists in `/etc/nginx/ssl/selfsigned.crt` + - SSL_CERTS=selfsigned + # + # Tip: To accept invalid certificate on localhost: + # - Chrome: enable chrome://flags/#allow-insecure-localhost + # - Firefox: about:config > security.enterprise_roots.enabled=true + security.certerrors.mitm.priming.enabled=false + # + # If using docker in a virtual or remote machine, create a new hostname in your /etc/hosts pointing to that IP + # and set `SSL_SUBJ_CN` to that hostname. (Chrome will not accept a self signed certificate for other than localhost.) + # For ex. with `docker-machine`, get ip with `docker-machine ip `, + # add hosts file entry for docker-machine-default, then browse https://docker-machine-default + # - SSL_SUBJ_CN=docker-machine-default + # + # Debug certificate generation script: + # - DEBUG=yes ports: - 80:80 - 443:443 @@ -42,7 +60,10 @@ services: - ./docker-data/letsencrypt/:/etc/letsencrypt/ - ./docker-data/drive-preview/:/tdrive-core/web/medias/ - ./docker-data/uploads/:/tdrive-core/web/upload/ - - ./docker-data/ssl:/etc/nginx/ssl + # If `$SSL_CERTS != off`, mounting certificates here will prevent auto-generating them. + # This allows you to keep previously generated (or other certificates), but changes to + # SSL_SUBJ_CN will be ignored then. + # - ./docker-data/ssl:/etc/nginx/ssl networks: - tdrive_network