search

pyspa / ogp-app

ogp.app
MIT License
3 stars 3 forks source link

Create container image to run the app more declaratively #8

Open ymotongpoo opened 4 years ago

ymotongpoo commented 4 years ago

Currently, ogp.app is running on normal GCE instance that requires to configure Cloud Logging agent to transfer logs to its backend. Also it requires extra setup to tail logfile for the log transfer.

By making the artifact of the app in container format, we can run the app on:

and we'll get more flexibilities on the development process.

ymotongpoo commented 4 years ago

Considering how to bundle and renew the TLS certificate used in the app. Currently the app is using the certificate issued from Let's Encrypt.

Given that, my idea here is to include lego and use renew command with --days on starting up the container.

Downsides of this method are:

  1. The base container needs to include the certificate issued at some timing anyway
  2. The app requires extra steps to boot
  3. The container requires extra disk size
  4. The container requires shell to run whole process of this

Any comments?

ymotongpoo commented 4 years ago

According to @mopemope, caddy would help the automation of TLS certificate renewal.