diff --git a/docker-compose-auto.yml b/docker-compose-auto.yml index 7e9eda5..719ec21 100644 --- a/docker-compose-auto.yml +++ b/docker-compose-auto.yml @@ -22,8 +22,16 @@ # Need to add to trusted-domains nextcloud.invertedlogic.ddns.net: # sudo vi /media/Data/Containers/NextCloud/config/config.php # -# Getting HTTPS certificates: -# sudo certbot certonly --nginx +# Getting HTTPS certificates (first on router redirect 80 to 9123 and with ISP disable port blocking of 80): +# +# sudo systemctl stop nginx.service +# sudo certbot certonly -v --nginx --http-01-port 9123 -d invertedlogic.ddns.net,www.invertedlogic.ddns.net,nextcloud.invertedlogic.ddns.net,jenkins.invertedlogic.ddns.net,\ +# minecraft.invertedlogic.ddns.net,cockpit.invertedlogic.ddns.net,vscode.invertedlogic.ddns.net,code.invertedlogic.ddns.net,code-server.invertedlogic.ddns.net,openproject.invertedlogic.ddns.net,\ +# home-assistant.invertedlogic.ddns.net,portainer.invertedlogic.ddns.net,gitbucket.invertedlogic.ddns.net,pihole.invertedlogic.ddns.net,docs.invertedlogic.ddns.net,artifacts.invertedlogic.ddns.net +# sudo systemctl start nginx.service +# +# When done, can block 80 again or redirect to a blackhole. Now instead when nginx is configured to use these certificates we can just allow 443 (HTTPS) instead of 80. + # select all that apply # # ================================================================ @@ -31,21 +39,21 @@ # ================================================================ # www - Y 443 443 - direct YES YES # nextcloud - Y 443 8000 80 proxy YES YES -# jenkins - Y 443 8081 - proxy YES YES (self-signed) +# jenkins - Y 443 8081 - proxy YES YES # pihole - Y 443 8020 80 -# portainer - Y 443 8030 9000 +# portainer - Y 443 8030 9000 need to add # open-project - Y 443 8040 80 proxy NO -# cockpit - Y 443 8050 9092 proxy NO self-signed - broken -# gitbucket - Y 443 8090 - proxy YES self-signed - broken (or visit with 8090) -# code-server - Y 443 8443 8443 ? YES -# minecraft - N 443 25565 25565 +# cockpit - Y 443 8050 9092 proxy NO self-signed - broken (or visit with 8050) +# gitbucket - Y 443 8090 - proxy YES self-signed - broken (or visit with 8090 / 8091 - probably settting for the site-url) +# code-server - Y 443 8443 8443 proxy YES YES - lost the volume ? +# minecraft - N 443 25565 25565 - services: cockpit-ws: image: cockpit-ws:latest container_name: cockpit-ws - hostname: cockpit.localdomain + hostname: cockpit.invertedlogic.ddns.net restart: always privileged: true volumes: @@ -56,6 +64,7 @@ # Docker access - /var/run/docker.sock:/var/run/docker.sock # Dummy home directories + - /media/Data/Containers/Cockpit/etc:/etc/cockpit - /media/Data/Containers/Cockpit/home:/home ports: - "8050:9092"