Commit Graph

34 Commits

Author SHA1 Message Date
voima-eetu
c3ecd245be
Change nginx container to unprivileged (#525) 2021-05-05 09:05:09 +02:00
wf6DJd8a3xSSCZbn
6f8c34c0f3
Updating shell scripts to adhear better to Bash style guides (#510)
* Updated Shell Script Format

Signed-off-by: Spencer <wf6DJd8a3xSSCZbn@protonmail.com>
2021-01-08 16:45:00 +01:00
Simon Staszkiewicz
c8b5a40f99
Update SSL ciphers and TLS versions in nginx config file (#501) 2020-11-03 10:12:21 +01:00
nvjacobo
7c80c1fdb5
add TLS 1.3 support to web container (#488) 2020-08-10 10:56:21 +02:00
Akendo
068e654249
Fix the linking of the nginx configuration file (#458)
In this commit I'm adding some logic to ensure that the `entrypoint.sh`
file handles a pre-existing `mattermost.conf` file within the nginx
folder.

During deployment of some more custom nginx configuration it was
noticed that the linking process fails, because a file already exists
with the filesystem.

Signed-off-by: Akendo <akendo@akendo.eu>
2020-04-01 11:32:05 +02:00
alessandro
07b368de41
web entrypoint: forcefully link existing config (#454) 2020-03-13 09:58:26 +01:00
Claas Augner
1427315ef9
Remove deprecated nginx ssl directive (#451) (#452) 2020-03-03 14:30:03 +01:00
Kyâne
dd1ecde9c8 Allow to properly shutdown web container
Closes #347
2018-12-14 19:56:30 +01:00
antoineHC
f79bbea7a4 Production Hardening (#241) 2018-04-15 19:33:49 +02:00
Kyâne Pichou
1aa54549b0
Revert "Improve TLS security (#243)" (#246)
This reverts commit 8bf84cd765.
2018-03-12 19:48:00 +01:00
Kyâne Pichou
8bf84cd765
Improve TLS security (#243)
Closes #242
2018-03-11 20:23:55 +01:00
Yusuke Nemoto
bf2d66321f Fix broken link (#227) 2018-01-21 23:06:54 +01:00
Pan Luo
7cccaa82d7
Merge pull request #198 from mattermost/use-alpine-on-web
Use Alpine based Nginx image for Web container
2017-11-19 23:29:10 -08:00
3_1_3_u
01a5a5a2b7 Add security config to nginx (#199) 2017-11-19 12:02:45 +01:00
PICHOU Kyâne
d3a8121675 Use Alpine based Nginx image for Web container 2017-11-18 17:04:52 +01:00
Kyâne Pichou
8dc50a5d31 Allow to customize app host/port (#181)
Allow to use custom hostname and/or port value for app container from the Web
container. Usefull for some people using containers provider (eg. #142)
2017-10-26 21:16:09 +02:00
Kyâne Pichou
5cc50eb522 Use best practices for Dockerfiles (#180) 2017-10-13 14:12:30 +02:00
pierre demagny
bcbe60a8d8 Add docker swarm mode support (#176)
* add docker swarm mode support

Signed-off-by: Pierre DEMAGNY <pdemagny@printoclock.com>

* use official prod-web image, respect project's standard directory layout & update readme accordingly.

Signed-off-by: Pierre DEMAGNY <pdemagny@printoclock.com>
2017-09-25 22:56:04 +02:00
PICHOU Kyâne
0ff2e7ea05 Remove IPv6 listening since it is not enable by default on Docker 2017-09-25 20:57:08 +02:00
Jack Minardi
6a7058b30d Add 301 redirect from port 80 to port 443 2017-07-19 14:42:23 -04:00
Carlos Schneider
15e7a9cd58 Fix X-Forwarded-Proto (PR suggestion) 2017-06-02 10:19:04 -03:00
Carlos Schneider
3ffc1056c7 Follows the NGINX Breaking Changes suggestion on Mattermost Changelog 2017-05-17 10:28:48 -03:00
nikosch86
f7c78e675a simplify reverse proxy (#98)
make use of mainline nginx image, switch ssl/non-ssl config file based on presence of cert/key, hardcode app port since it is hardcoded in the app container as well
2017-02-26 00:30:03 -08:00
John
a83cc74087 Updated nginx ssl config to provide correct X-Forwared-Proto header 2016-10-15 13:29:13 +02:00
John
d9b9d12d08 Updated nginx config to provide correct X-Forwared-Proto header 2016-10-15 13:26:08 +02:00
Yi EungJun
811360572e Unify docker-compose-nossl.yml and docker-compose-ssl.yml 2016-06-03 00:06:42 +09:00
Yi EungJun
928bcc25a1 web: Do not depend IP address of app 2016-06-01 21:03:46 +09:00
Yi EungJun
4bf0f4b64a web: Do not store secret files in container 2016-06-01 21:03:46 +09:00
Yi EungJun
03357a87c1 web: Send logs to docker 2016-06-01 21:03:46 +09:00
Yi EungJun
9fb62460a8 web: Fix HTTPS redirecting
This fixes https://github.com/mattermost/mattermost-docker/issues/12
2016-04-20 22:35:51 +09:00
Yi EungJun
459e3822ec web: Comment the configuration for redirecting to 443 2016-01-25 01:42:35 +00:00
Yi EungJun
7c5a13661d Remove unnecessary server_name 2016-01-25 01:42:07 +00:00
Frank Maker
586b885473 Add trailing backslash to fix "not a directory" error
Running this Dockerfile on Fedora 22 throws a "not a directory" error when it reaches "ADD cert/cert.pem /cert". Adding a backslash to the path resolves the issue.
2016-01-05 11:34:08 -08:00
Yi EungJun
4cf5bdc8c8 Docker for mattermost in production
1. Put cert.pem into web/cert and key-no-password.pem into web/cert/private.
2. docker-compose up -d

The settings of the servers are based on
https://github.com/mattermost/platform/blob/master/doc/install/Production-Ubuntu.md.

app/config_docker.json is based on
https://raw.githubusercontent.com/mattermost/platform/master/config/config.json.
2015-11-30 17:54:49 +09:00