Tips-Of-Mine/Docker
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

all

Browse Source
This commit is contained in:
Hubert Cornet
2024-04-21 14:42:52 +02:00
parent 4b69674ede
commit 8a25f53c99
10700 changed files with 55767 additions and 14201 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Authentication/Authelia/LICENSE Normal file
View File

@ -0,0 +1,3 @@
Additional permission under GNU GPL version 3 section 7
If you modify this Program, or any covered work, by linking or combining it with [name of library] (or a modified version of that library), containing parts covered by the terms of [name of library's license], the licensors of this Program grant you additional permission to convey the resulting work. Corresponding Source for a non-source form of such a combination shall include the source code for the parts of [name of library] used as well as that of the covered work.

24
Authentication/Authelia/README.md
View File

@ -1,8 +1,10 @@
![Authelia](./img/logo-Authelia.png)
URL :
# Authelia
# Téléchargement, Configuration et Lancement
## Téléchargement de Authelia
@ -23,6 +25,14 @@ Saisir la commande pour vous rendre dans le dossier
```bash
cd Authentication\Authelia
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Authelia
Pour utiliser Authelia tout seul
@ -35,15 +45,19 @@ Pour utiliser Authelia avec Traefik
docker compose -f docker-compose-traefik.yml up -d
```
Pour utiliser Authelia avec Nginx
```bash
docker compose -f docker-compose-nginx.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Authelia.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)

1442
Authentication/Authelia/configuration.yml
View File

File diff suppressed because it is too large Load Diff

126
Authentication/Authelia/docker-compose-traefik.yml
View File

@ -1,64 +1,66 @@
#### NETWORKS
networks:
docker-traefik_front_network:
external: true
back_network:
driver: bridge
attachable: true
#### SERVICES
services:
![Fichier-Stockage](./img/logo-Fichier-Stockage.png)
URL : HHHHH
### Authelia
authelia:
container_name: authelia-app
hostname: authelia-app
image: authelia/authelia
volumes:
- ./config:/config
networks:
- back_network
- docker-traefik_front_network
security_opt:
- no-new-privileges:true
labels:
- "traefik.enable=true"
- "traefik.docker.network=docker-traefik_front_network"
# HTTP
- "traefik.http.routers.authelia-http.rule=Host(`auth.10.0.4.29.traefik.me`)"
- "traefik.http.routers.authelia-http.entrypoints=http"
# HTTPS
- "traefik.http.routers.authelia-https.rule=Host(`auth.10.0.4.29.traefik.me`)"
- "traefik.http.routers.authelia-https.entrypoints=https"
- "traefik.http.routers.authelia-https.tls=true"
- "traefik.http.routers.authelia.service=authelia-service"
- "traefik.http.routers.authelia-https.middlewares=authelia-addprefix"
# Middleware
- "traefik.http.middlewares.guacamole-addprefix.addprefix.prefix=/guacamole"
- 'traefik.http.middlewares.authelia.forwardAuth.address=http://authelia:9091/api/verify?rd=https://auth.jimsgarage.co.uk'
- 'traefik.http.middlewares.authelia.forwardAuth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.address=http://authelia:9091/api/verify?auth=basic'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email'
# Service
- "traefik.http.services.authelia-service.loadbalancer.server.port=9091"
restart: unless-stopped
environment:
- TZ=Europe/Paris
healthcheck:
disable: true
# Fichier-Stockage
redis:
container_name: authelia-redis
hostname: authelia-redis
image: redis:alpine
volumes:
- ./redis:/data
networks:
- back_network
expose:
- 6379
restart: unless-stopped
environment:
- TZ=Europe/Paris
GGGGG
# Téléchargement, Configuration et Lancement
## Téléchargement de Fichier-Stockage
Saisir la commande pour télécharger la source
```bash
git clone https://git.tips-of-mine.fr/Tips-Of-Mine/Docker.git
```
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
## Modifier la configuration de Fichier-Stockage
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Fichier-Stockage
Pour utiliser Fichier-Stockage tout seul
```bash
docker compose up -d
```
Pour utiliser Fichier-Stockage avec Traefik
```bash
docker compose -f docker-compose-traefik.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Fichier-Stockage.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)
# Buy me a coffe
<a href='https://ko-fi.com/R5R2KNI3N' target='_blank'><img height='36' style='border:0px;height:36px;' src='https://storage.ko-fi.com/cdn/kofi4.png?v=3' border='0' alt='Buy Me a Coffee at ko-fi.com' /></a>

55
Authentication/Authelia/docker-compose.yml
View File

@ -1,49 +1,8 @@
version: '3'
services:
authelia:
image: authelia/authelia
container_name: authelia
volumes:
- /home/ubuntu/docker/authelia/config:/config
networks:
- proxy
security_opt:
- no-new-privileges:true
labels:
- 'traefik.enable=true'
- 'traefik.http.routers.authelia.rule=Host(`auth.jimsgarage.co.uk`)'
- 'traefik.http.routers.authelia.entrypoints=https'
- 'traefik.http.routers.authelia.tls=true'
- 'traefik.http.middlewares.authelia.forwardAuth.address=http://authelia:9091/api/verify?rd=https://auth.jimsgarage.co.uk'
- 'traefik.http.middlewares.authelia.forwardAuth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.address=http://authelia:9091/api/verify?auth=basic'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.trustForwardHeader=true'
- 'traefik.http.middlewares.authelia-basic.forwardAuth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email'
- 'traefik.http.services.authelia.loadbalancer.server.port=9091'
ports:
- 9091:9091
restart: unless-stopped
environment:
- TZ=Europe/London
healthcheck:
disable: true
redis:
image: redis:alpine
container_name: redis
volumes:
- /home/ubuntu/docker/redis:/data
networks:
- proxy
expose:
- 6379
restart: unless-stopped
environment:
- TZ=Europe/London
#### NETWORKS
networks:
proxy:
external: true
back_network:
driver: bridge
attachable: true
#### SERVICES
services:

0
Authentication/Authelia/img/logo-Authelia.png → Authentication/Authelia/img/banniere-Authelia.png
View File

Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 2.8 KiB

After

Width:  |  Height:  |  Size: 2.8 KiB

19
Authentication/Authelia/users_database.yml
View File

@ -1,19 +0,0 @@
---
###############################################################
# Users Database #
###############################################################
# This file can be used if you do not have an LDAP set up.
# List of users
users:
authelia:
disabled: false
displayname: "Authelia User"
# Password is authelia
password: "$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/" # yamllint disable-line rule:line-length
email: authelia@authelia.com
groups:
- admins
- dev
...

18
Authentication/Authentik/.env
View File

@ -1,18 +0,0 @@
PG_PASS=UaXg4bygCAIBx3aIegkYk22LE5bOBWLpAuv60eGk
AUTHENTIK_SECRET_KEY=ThB3GtCJgHxkoFhyorQ4s5jMznqM13nebhHadJvbp5F2E11wA0
AUTHENTIK_ERROR_REPORTING__ENABLED=true
COMPOSE_PORT_HTTPS=1443
COMPOSE_PORT_HTTP=7000
# SMTP Host Emails are sent to
AUTHENTIK_EMAIL__HOST=localhost
AUTHENTIK_EMAIL__PORT=25
# Optionally authenticate (don't add quotation marks to your password)
AUTHENTIK_EMAIL__USERNAME=admin@tips-of-mine.fr
AUTHENTIK_EMAIL__PASSWORD=password
# Use StartTLS
AUTHENTIK_EMAIL__USE_TLS=false
# Use SSL
AUTHENTIK_EMAIL__USE_SSL=false
AUTHENTIK_EMAIL__TIMEOUT=10
# Email address authentik will send from, should have a correct @domain
AUTHENTIK_EMAIL__FROM=authentik@localhost

24
Authentication/Authentik/README.md
View File

@ -1,8 +1,10 @@
![Authentik](./img/logo-Authentik.png)
URL :
# Authentik
# Téléchargement, Configuration et Lancement
## Téléchargement de Authentik
@ -23,6 +25,14 @@ Saisir la commande pour vous rendre dans le dossier
```bash
cd Authentication\Authentik
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Authentik
Pour utiliser Authentik tout seul
@ -35,15 +45,19 @@ Pour utiliser Authentik avec Traefik
docker compose -f docker-compose-traefik.yml up -d
```
Pour utiliser Authentik avec Nginx
```bash
docker compose -f docker-compose-nginx.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Authentik.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)

187
Authentication/Authentik/docker-compose-traefik.yml
View File

@ -1,131 +1,66 @@
#### NETWORKS
networks:
docker-traefik_front_network:
external: true
back_network:
driver: bridge
attachable: true
![Fichier-Stockage](./img/logo-Fichier-Stockage.png)
URL : HHHHH
#### SERVICES
services:
# Fichier-Stockage
### postgresql
postgresql:
container_name: authentik-postgres
hostname: authentik-postgres
image: docker.io/library/postgres:15.6-alpine
restart: unless-stopped
networks:
- back_network
healthcheck:
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
start_period: 20s
interval: 30s
retries: 5
timeout: 5s
volumes:
- ./data:/var/lib/postgresql/data
environment:
PGDATA: /var/lib/postgresql/data/authentik
POSTGRES_PASSWORD: 'P@ssword!Here!123456'
POSTGRES_USER: authentik_user
POSTGRES_DB: authentik_db
TZ: Europe/Paris
env_file:
- .env
GGGGG
### redis
redis:
container_name: authentik-redis
hostname: authentik-redis
image: docker.io/library/redis:alpine
command: --save 60 1 --loglevel warning
restart: unless-stopped
networks:
- back_network
healthcheck:
test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
start_period: 20s
interval: 30s
retries: 5
timeout: 3s
volumes:
- ./redis:/data
environment:
- TZ=Europe/London
# Téléchargement, Configuration et Lancement
### authentik-server
server:
container_name: authentik-server
hostname: authentik-server
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.2.2}
restart: unless-stopped
networks:
- docker-traefik_front_network
- back_network
command: server
environment:
AUTHENTIK_REDIS__HOST: redis
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__USER: authentik_user
AUTHENTIK_POSTGRESQL__NAME: authentik_db
AUTHENTIK_POSTGRESQL__PASSWORD: 'P@ssword!Here!123456'
volumes:
- ./media:/media
- ./custom-templates:/templates
env_file:
- .env
# ports:
# - "${COMPOSE_PORT_HTTP:-7000}:9000"
# - "${COMPOSE_PORT_HTTPS:-7443}:9443"
depends_on:
- postgresql
- redis
labels:
- "traefik.enable=true"
- "traefik.docker.network=docker-traefik_front_network"
# HTTP
- "traefik.http.routers.authentik-http.rule=Host(`authentik.10.0.4.29.traefik.me`)"
- "traefik.http.routers.authentik-http.entrypoints=http"
# HTTPS
- "traefik.http.routers.authentik-https.rule=Host(`authentik.10.0.4.29.traefik.me`)"
- "traefik.http.routers.authentik-https.entrypoints=https"
- "traefik.http.routers.authentik-https.service=authentik-service"
- "traefik.http.routers.authentik-https.tls=true"
# Middleware
# Service
- "traefik.http.services.authentik-service.loadbalancer.server.port=9000"
## Téléchargement de Fichier-Stockage
### authentik-worker
worker:
container_name: authentik-worker
hostname: authentik-worker
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.2.2}
restart: unless-stopped
networks:
- docker-traefik_front_network
- back_network
command: worker
environment:
AUTHENTIK_REDIS__HOST: redis
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__USER: authentik_user
AUTHENTIK_POSTGRESQL__NAME: authentik_db
AUTHENTIK_POSTGRESQL__PASSWORD: 'P@ssword!Here!123456'
# `user: root` and the docker socket volume are optional.
# See more for the docker socket integration here:
# https://goauthentik.io/docs/outposts/integrations/docker
# Removing `user: root` also prevents the worker from fixing the permissions
# on the mounted folders, so when removing this make sure the folders have the correct UID/GID
# (1000:1000 by default)
user: root
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./media:/media
- ./certs:/certs
- ./custom-templates:/templates
env_file:
- .env
depends_on:
- postgresql
- redis
Saisir la commande pour télécharger la source
```bash
git clone https://git.tips-of-mine.fr/Tips-Of-Mine/Docker.git
```
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
## Modifier la configuration de Fichier-Stockage
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Fichier-Stockage
Pour utiliser Fichier-Stockage tout seul
```bash
docker compose up -d
```
Pour utiliser Fichier-Stockage avec Traefik
```bash
docker compose -f docker-compose-traefik.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Fichier-Stockage.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)
# Buy me a coffe
<a href='https://ko-fi.com/R5R2KNI3N' target='_blank'><img height='36' style='border:0px;height:36px;' src='https://storage.ko-fi.com/cdn/kofi4.png?v=3' border='0' alt='Buy Me a Coffee at ko-fi.com' /></a>

87
Authentication/Authentik/docker-compose.yaml
View File

@ -1,87 +0,0 @@
---
version: "3.4"
services:
postgresql:
image: docker.io/library/postgres:12-alpine
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
start_period: 20s
interval: 30s
retries: 5
timeout: 5s
volumes:
- database:/var/lib/postgresql/data
environment:
POSTGRES_PASSWORD: ${PG_PASS:?database password required}
POSTGRES_USER: ${PG_USER:-authentik}
POSTGRES_DB: ${PG_DB:-authentik}
env_file:
- .env
redis:
image: docker.io/library/redis:alpine
command: --save 60 1 --loglevel warning
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
start_period: 20s
interval: 30s
retries: 5
timeout: 3s
volumes:
- redis:/data
server:
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.3}
restart: unless-stopped
command: server
environment:
AUTHENTIK_REDIS__HOST: redis
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
volumes:
- ./media:/media
- ./custom-templates:/templates
env_file:
- .env
ports:
- "${COMPOSE_PORT_HTTP:-9000}:9000"
- "${COMPOSE_PORT_HTTPS:-9443}:9443"
depends_on:
- postgresql
- redis
worker:
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.3}
restart: unless-stopped
command: worker
environment:
AUTHENTIK_REDIS__HOST: redis
AUTHENTIK_POSTGRESQL__HOST: postgresql
AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
# `user: root` and the docker socket volume are optional.
# See more for the docker socket integration here:
# https://goauthentik.io/docs/outposts/integrations/docker
# Removing `user: root` also prevents the worker from fixing the permissions
# on the mounted folders, so when removing this make sure the folders have the correct UID/GID
# (1000:1000 by default)
user: root
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- ./media:/media
- ./certs:/certs
- ./custom-templates:/templates
env_file:
- .env
depends_on:
- postgresql
- redis
volumes:
database:
driver: local
redis:
driver: local

8
Authentication/Authentik/docker-compose.yml
View File

@ -0,0 +1,8 @@
#### NETWORKS
networks:
back_network:
driver: bridge
attachable: true
#### SERVICES
services:

0
Authentication/Authentik/img/logo-Authentik.png → Authentication/Authentik/img/banniere-Authentik.png
View File

Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 10 KiB

After

Width:  |  Height:  |  Size: 10 KiB

11
Authentication/Authentik/prepare.sh
View File

@ -1,11 +0,0 @@
#!/bin/sh
if ! (docker ps >/dev/null 2>&1)
then
echo "Le daemon docker n'est pas en cours d'exécution, sortie !"
exit
fi
echo "Préparation"
mkdir -p ./redis >/dev/null 2>&1
mkdir -p ./data >/dev/null 2>&1

3
Authentication/Keycloak/LICENSE Normal file
View File

@ -0,0 +1,3 @@
Additional permission under GNU GPL version 3 section 7
If you modify this Program, or any covered work, by linking or combining it with [name of library] (or a modified version of that library), containing parts covered by the terms of [name of library's license], the licensors of this Program grant you additional permission to convey the resulting work. Corresponding Source for a non-source form of such a combination shall include the source code for the parts of [name of library] used as well as that of the covered work.

24
Authentication/Keycloak/README.md
View File

@ -1,7 +1,9 @@
![Keycloak](./img/logo-Keycloak.png)
URL :
# Keycloak
Solution de gestion de l'identit? et de l'acc?s ? l'Open Source pour les applications et les services modernes.
# Téléchargement, Configuration et Lancement
@ -23,6 +25,14 @@ Saisir la commande pour vous rendre dans le dossier
```bash
cd Authentication\Keycloak
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Keycloak
Pour utiliser Keycloak tout seul
@ -35,15 +45,19 @@ Pour utiliser Keycloak avec Traefik
docker compose -f docker-compose-traefik.yml up -d
```
Pour utiliser Keycloak avec Nginx
```bash
docker compose -f docker-compose-nginx.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Keycloak.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)

66
Authentication/Keycloak/docker-compose-traefik.yml
View File

@ -0,0 +1,66 @@
![Fichier-Stockage](./img/logo-Fichier-Stockage.png)
URL : HHHHH
# Fichier-Stockage
GGGGG
# Téléchargement, Configuration et Lancement
## Téléchargement de Fichier-Stockage
Saisir la commande pour télécharger la source
```bash
git clone https://git.tips-of-mine.fr/Tips-Of-Mine/Docker.git
```
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
## Modifier la configuration de Fichier-Stockage
Saisir la commande pour vous rendre dans le dossier
```bash
cd AAAAA\Fichier-Stockage
```
Nous éditons le fichier de configuration
```bash
nano .env
```
Nous modifions les variables dont nous avons besoin.
## Lancement de Fichier-Stockage
Pour utiliser Fichier-Stockage tout seul
```bash
docker compose up -d
```
Pour utiliser Fichier-Stockage avec Traefik
```bash
docker compose -f docker-compose-traefik.yml up -d
```
# Utilisation
## Accueil
Ouvrir une page web avec l'url :
Pour une utilisation tout seul
http://10.0.4.29:3000
Pour une utilisation avec Traefik
https://Fichier-Stockage.10.0.4.29.traefik.me`)"
# More info
- more information on the website [Tips-Of-Mine](https://www.tips-of-mine.fr/)
# Buy me a coffe
<a href='https://ko-fi.com/R5R2KNI3N' target='_blank'><img height='36' style='border:0px;height:36px;' src='https://storage.ko-fi.com/cdn/kofi4.png?v=3' border='0' alt='Buy Me a Coffee at ko-fi.com' /></a>

8
Authentication/Keycloak/docker-compose.yml
View File

@ -0,0 +1,8 @@
#### NETWORKS
networks:
back_network:
driver: bridge
attachable: true
#### SERVICES
services:

BIN
Authentication/Keycloak/img/logo-Keycloak.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 2.7 KiB

0
Authentication/docker-compose-traefik.yml
View File

0
Authentication/docker-compose.yml
View File