voima-eetu
c3ecd245be
Change nginx container to unprivileged ( #525 )
2021-05-05 09:05:09 +02:00
wf6DJd8a3xSSCZbn
6f8c34c0f3
Updating shell scripts to adhear better to Bash style guides ( #510 )
...
* Updated Shell Script Format
Signed-off-by: Spencer <wf6DJd8a3xSSCZbn@protonmail.com>
2021-01-08 16:45:00 +01:00
Simon Staszkiewicz
c8b5a40f99
Update SSL ciphers and TLS versions in nginx config file ( #501 )
2020-11-03 10:12:21 +01:00
nvjacobo
7c80c1fdb5
add TLS 1.3 support to web container ( #488 )
2020-08-10 10:56:21 +02:00
Akendo
068e654249
Fix the linking of the nginx configuration file ( #458 )
...
In this commit I'm adding some logic to ensure that the `entrypoint.sh`
file handles a pre-existing `mattermost.conf` file within the nginx
folder.
During deployment of some more custom nginx configuration it was
noticed that the linking process fails, because a file already exists
with the filesystem.
Signed-off-by: Akendo <akendo@akendo.eu>
2020-04-01 11:32:05 +02:00
alessandro
07b368de41
web entrypoint: forcefully link existing config ( #454 )
2020-03-13 09:58:26 +01:00
Claas Augner
1427315ef9
Remove deprecated nginx ssl directive ( #451 ) ( #452 )
2020-03-03 14:30:03 +01:00
Kyâne
dd1ecde9c8
Allow to properly shutdown web container
...
Closes #347
2018-12-14 19:56:30 +01:00
antoineHC
f79bbea7a4
Production Hardening ( #241 )
2018-04-15 19:33:49 +02:00
Kyâne Pichou
1aa54549b0
Revert "Improve TLS security ( #243 )" ( #246 )
...
This reverts commit 8bf84cd765
.
2018-03-12 19:48:00 +01:00
Kyâne Pichou
8bf84cd765
Improve TLS security ( #243 )
...
Closes #242
2018-03-11 20:23:55 +01:00
Yusuke Nemoto
bf2d66321f
Fix broken link ( #227 )
2018-01-21 23:06:54 +01:00
Pan Luo
7cccaa82d7
Merge pull request #198 from mattermost/use-alpine-on-web
...
Use Alpine based Nginx image for Web container
2017-11-19 23:29:10 -08:00
3_1_3_u
01a5a5a2b7
Add security config to nginx ( #199 )
2017-11-19 12:02:45 +01:00
PICHOU Kyâne
d3a8121675
Use Alpine based Nginx image for Web container
2017-11-18 17:04:52 +01:00
Kyâne Pichou
8dc50a5d31
Allow to customize app host/port ( #181 )
...
Allow to use custom hostname and/or port value for app container from the Web
container. Usefull for some people using containers provider (eg. #142 )
2017-10-26 21:16:09 +02:00
Kyâne Pichou
5cc50eb522
Use best practices for Dockerfiles ( #180 )
2017-10-13 14:12:30 +02:00
pierre demagny
bcbe60a8d8
Add docker swarm mode support ( #176 )
...
* add docker swarm mode support
Signed-off-by: Pierre DEMAGNY <pdemagny@printoclock.com>
* use official prod-web image, respect project's standard directory layout & update readme accordingly.
Signed-off-by: Pierre DEMAGNY <pdemagny@printoclock.com>
2017-09-25 22:56:04 +02:00
PICHOU Kyâne
0ff2e7ea05
Remove IPv6 listening since it is not enable by default on Docker
2017-09-25 20:57:08 +02:00
Jack Minardi
6a7058b30d
Add 301 redirect from port 80 to port 443
2017-07-19 14:42:23 -04:00
Carlos Schneider
15e7a9cd58
Fix X-Forwarded-Proto (PR suggestion)
2017-06-02 10:19:04 -03:00
Carlos Schneider
3ffc1056c7
Follows the NGINX Breaking Changes suggestion on Mattermost Changelog
2017-05-17 10:28:48 -03:00
nikosch86
f7c78e675a
simplify reverse proxy ( #98 )
...
make use of mainline nginx image, switch ssl/non-ssl config file based on presence of cert/key, hardcode app port since it is hardcoded in the app container as well
2017-02-26 00:30:03 -08:00
John
a83cc74087
Updated nginx ssl config to provide correct X-Forwared-Proto header
2016-10-15 13:29:13 +02:00
John
d9b9d12d08
Updated nginx config to provide correct X-Forwared-Proto header
2016-10-15 13:26:08 +02:00
Yi EungJun
811360572e
Unify docker-compose-nossl.yml and docker-compose-ssl.yml
2016-06-03 00:06:42 +09:00
Yi EungJun
928bcc25a1
web: Do not depend IP address of app
2016-06-01 21:03:46 +09:00
Yi EungJun
4bf0f4b64a
web: Do not store secret files in container
2016-06-01 21:03:46 +09:00
Yi EungJun
03357a87c1
web: Send logs to docker
2016-06-01 21:03:46 +09:00
Yi EungJun
9fb62460a8
web: Fix HTTPS redirecting
...
This fixes https://github.com/mattermost/mattermost-docker/issues/12
2016-04-20 22:35:51 +09:00
Yi EungJun
459e3822ec
web: Comment the configuration for redirecting to 443
2016-01-25 01:42:35 +00:00
Yi EungJun
7c5a13661d
Remove unnecessary server_name
2016-01-25 01:42:07 +00:00
Frank Maker
586b885473
Add trailing backslash to fix "not a directory" error
...
Running this Dockerfile on Fedora 22 throws a "not a directory" error when it reaches "ADD cert/cert.pem /cert". Adding a backslash to the path resolves the issue.
2016-01-05 11:34:08 -08:00
Yi EungJun
4cf5bdc8c8
Docker for mattermost in production
...
1. Put cert.pem into web/cert and key-no-password.pem into web/cert/private.
2. docker-compose up -d
The settings of the servers are based on
https://github.com/mattermost/platform/blob/master/doc/install/Production-Ubuntu.md .
app/config_docker.json is based on
https://raw.githubusercontent.com/mattermost/platform/master/config/config.json .
2015-11-30 17:54:49 +09:00