cookiecutter/cookiecutter-django
1
1
Fork 0
mirror of https://github.com/cookiecutter/cookiecutter-django.git synced 2024-11-15 06:08:38 +03:00
Code Issues Packages Projects Releases Wiki Activity

run traefik as non-root user, closes #1992

Browse Source
This commit is contained in:
Jannis Gebauer 2019-09-07 12:13:16 +02:00
parent bcf8ec3e89
commit db11de4e74
3 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
{{cookiecutter.project_slug}}/compose/production/traefik/Dockerfile
View File

@ -3,3 +3,10 @@ RUN mkdir -p /etc/traefik/acme
RUN touch /etc/traefik/acme/acme.json RUN touch /etc/traefik/acme/acme.json
RUN chmod 600 /etc/traefik/acme/acme.json RUN chmod 600 /etc/traefik/acme/acme.json
COPY ./compose/production/traefik/traefik.toml /etc/traefik COPY ./compose/production/traefik/traefik.toml /etc/traefik
RUN addgroup -g 101 -S traefik
RUN adduser -S -D -H -u 101 -s /sbin/nologin -G traefik -g traefik traefik
RUN chown -R traefik /etc/traefik
USER traefik
EXPOSE 8080/tcp 8443/tcp

4
{{cookiecutter.project_slug}}/compose/production/traefik/traefik.toml
View File

@ -5,12 +5,12 @@ defaultEntryPoints = ["http", "https"]
[entryPoints] [entryPoints]
# http should be redirected to https # http should be redirected to https
[entryPoints.http] [entryPoints.http]
address = ":80" address = ":8080"
[entryPoints.http.redirect] [entryPoints.http.redirect]
entryPoint = "https" entryPoint = "https"
# https is the default # https is the default
[entryPoints.https] [entryPoints.https]
address = ":443" address = ":8443"
[entryPoints.https.tls] [entryPoints.https.tls]
# Enable ACME (Let's Encrypt): automatic SSL # Enable ACME (Let's Encrypt): automatic SSL

4
{{cookiecutter.project_slug}}/production.yml
View File

@ -40,8 +40,8 @@ services:
volumes: volumes:
- production_traefik:/etc/traefik/acme - production_traefik:/etc/traefik/acme
ports: ports:
- "0.0.0.0:80:80" - "0.0.0.0:80:8080"
- "0.0.0.0:443:443" - "0.0.0.0:443:8443"
redis: redis:
image: redis:5.0 image: redis:5.0