OpenConext / OpenConext-deploy

Ansible-based deployment automation for the OpenConext platform
Apache License 2.0
12 stars 21 forks source link

Feature/docker install #441

Closed quartje closed 11 months ago

quartje commented 1 year ago

This creates a new docker setup. It installs Traefik on the Docker host, which uses the backend ssl certificate that is used in regular VM based setups to secure the connection between Haproxy and Traefik. The containers will be labeled with the correct hostname, so they are automatically picked up by Traefik. No further configuration is needed in Haproxy. I've included an iptables setup which allows for adding host rules in INPUT, without loosing them when docker is restarted

Both spdashboard and access (our only two docker based workloads) have been changed to reflect the new setup .