From 923479da89dbee3472b2a4278c0ead884f850670 Mon Sep 17 00:00:00 2001 From: Matthew Tran Date: Mon, 11 Sep 2023 02:16:04 +0000 Subject: [PATCH] add basic gitea with nginx reverse proxy --- compose.yml | 7 +++++++ website/Dockerfile | 5 +---- website/entry.sh | 5 +++-- website/matthewtran.com | 16 ++++++++++++++++ 4 files changed, 27 insertions(+), 6 deletions(-) diff --git a/compose.yml b/compose.yml index f60c414..fc9b6e0 100644 --- a/compose.yml +++ b/compose.yml @@ -8,6 +8,13 @@ services: - "443:443" volumes: - ./website/letsencrypt:/etc/letsencrypt + gitea: + restart: always + image: gitea/gitea:latest + ports: + - "2222:22" + # TODO add volumes for gitea default settings + # TODO add volumes to save data monerod: restart: always build: monerod/. diff --git a/website/Dockerfile b/website/Dockerfile index 7e3376c..ac49951 100644 --- a/website/Dockerfile +++ b/website/Dockerfile @@ -6,14 +6,11 @@ RUN apt-get install -y nginx certbot python3-certbot-nginx RUN rm /etc/nginx/sites-enabled/default -# enable matthewtran.com +# enable site COPY matthewtran.com /etc/nginx/sites-available RUN ln -s /etc/nginx/sites-available/matthewtran.com /etc/nginx/sites-enabled/matthewtran.com COPY html /var/www/matthewtran.com/html -# TODO gitea -# disable registration! - # start script WORKDIR /root COPY entry.sh ./ diff --git a/website/entry.sh b/website/entry.sh index e67d97a..d726b1d 100644 --- a/website/entry.sh +++ b/website/entry.sh @@ -1,18 +1,19 @@ #!/bin/sh +# server needs to be up to grab certificates nginx while [ ! -f /var/run/nginx.pid ] do sleep 1 done -# server needs to be up to grab certificates certbot --nginx \ --test-cert \ --webroot-path /var/www/matthewtran.com \ --non-interactive --agree-tos -m matthewlamtran@berkeley.edu \ -d matthewtran.com \ - -d www.matthewtran.com + -d www.matthewtran.com \ + -d git.matthewtran.com nginx -s reload diff --git a/website/matthewtran.com b/website/matthewtran.com index 1512c1d..a9ee4af 100644 --- a/website/matthewtran.com +++ b/website/matthewtran.com @@ -11,3 +11,19 @@ server { try_files $uri $uri/ =404; } } + +server { + listen 80; + listen [::]:80; + + server_name git.matthewtran.com; + + location / { + client_max_body_size 512M; + proxy_pass http://gitea:3000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +}