diff --git a/README.md b/README.md index 6225d55..41281cc 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ > Make security by default great again ! -bunkerized-nginx is a web server based on the notorious nginx and focused on security. It integrates into existing environments (Linux, Docker, Swarm, Kubernetes, ...) to make your web services "secured by default" without any hassle. The security best practices are automatically applied for you while keeping control of every settings to meet your own use case. +bunkerized-nginx is a web server based on the notorious nginx and focused on security. It integrates into existing environments (Linux, Docker, Swarm, Kubernetes, ...) to make your web services "secure by default" without any hassle. The security best practices are automatically applied for you while keeping control of every settings to meet your own use case. diff --git a/docs/security_tuning.md b/docs/security_tuning.md index 81769e3..7b6d106 100644 --- a/docs/security_tuning.md +++ b/docs/security_tuning.md @@ -199,7 +199,7 @@ You can quickly protect sensitive resources (e.g. : admin panels) by requiring H - `AUTH_BASIC_PASSWORD=changeme` : the password required - `AUTH_BASIC_TEXT=Restricted area` : the text that will be displayed to the user -Please note that bunkerized-nginx also supports [Authelia](https://github.com/authelia/authelia) for authentication (see the corresponding [environment variables](https://bunkerized-nginx.readthedocs.io/en/latest/environment_variables.html#authelia) and a [full example](https://github.com/bunkerity/bunkerized-nginx/tree/dev/examples/authelia)). +Please note that bunkerized-nginx also supports [Authelia](https://github.com/authelia/authelia) for authentication (see the corresponding [environment variables](https://bunkerized-nginx.readthedocs.io/en/latest/environment_variables.html#authelia) and a [full example](https://github.com/bunkerity/bunkerized-nginx/tree/master/examples/authelia)). ## Whitelisting diff --git a/examples/autoconf-reverse-proxy/docker-compose.yml b/examples/autoconf-reverse-proxy/docker-compose.yml index 4e003de..994462f 100644 --- a/examples/autoconf-reverse-proxy/docker-compose.yml +++ b/examples/autoconf-reverse-proxy/docker-compose.yml @@ -12,6 +12,7 @@ services: - NODE_ENV=production labels: - "bunkerized-nginx.SERVER_NAME=app1.example.com" # replace with your domain + - "bunkerized-nginx.USE_REVERSE_PROXY=yes" - "bunkerized-nginx.REVERSE_PROXY_URL=/" - "bunkerized-nginx.REVERSE_PROXY_HOST=http://myapp1:3000" @@ -25,6 +26,7 @@ services: - NODE_ENV=production labels: - "bunkerized-nginx.SERVER_NAME=app2.example.com" # replace with your domain + - "bunkerized-nginx.USE_REVERSE_PROXY=yes" - "bunkerized-nginx.REVERSE_PROXY_URL=/" - "bunkerized-nginx.REVERSE_PROXY_HOST=http://myapp2:3000" @@ -38,6 +40,7 @@ services: - NODE_ENV=production labels: - "bunkerized-nginx.SERVER_NAME=app3.example.com" # replace with your domain + - "bunkerized-nginx.USE_REVERSE_PROXY=yes" - "bunkerized-nginx.REVERSE_PROXY_URL=/" - "bunkerized-nginx.REVERSE_PROXY_HOST=http://myapp3:3000" diff --git a/examples/gogs/README.md b/examples/gogs/README.md index 2fa3425..1021743 100644 --- a/examples/gogs/README.md +++ b/examples/gogs/README.md @@ -6,6 +6,10 @@ Gogs is an easy to install, cross-platform and lightweight self-hosted Git servi +## Configuration + +You will need to edit the `data-gogs/gogs/conf/app.ini` with your own settings. + ## Docker See [docker-compose.yml](https://github.com/bunkerity/bunkerized-nginx/blob/master/examples/gogs/docker-compose.yml). diff --git a/examples/gogs/data-gogs/gogs/conf/app.ini b/examples/gogs/data-gogs/gogs/conf/app.ini new file mode 100644 index 0000000..d249d49 --- /dev/null +++ b/examples/gogs/data-gogs/gogs/conf/app.ini @@ -0,0 +1,3 @@ +[server] +EXTERNAL_URL = https://www.example.com/ +DOMAIN = www.example.com diff --git a/examples/gogs/docker-compose.yml b/examples/gogs/docker-compose.yml index c3dd535..c5480a0 100644 --- a/examples/gogs/docker-compose.yml +++ b/examples/gogs/docker-compose.yml @@ -22,7 +22,7 @@ services: - USE_GZIP=yes - USE_REVERSE_PROXY=yes - REVERSE_PROXY_URL=/ - - REVERSE_PROXY_HOST=http://mygogs:3000/ + - REVERSE_PROXY_HOST=http://mygogs:3000 mygogs: image: gogs/gogs diff --git a/examples/kubernetes/php.yml b/examples/kubernetes/php.yml index 90f8d58..555f506 100644 --- a/examples/kubernetes/php.yml +++ b/examples/kubernetes/php.yml @@ -35,7 +35,7 @@ metadata: bunkerized-nginx: "yes" annotations: bunkerized-nginx.SERVER_NAME: "app2.example.com" - bunkerized-nginx.REMOTE_PHP: "app2" + bunkerized-nginx.REMOTE_PHP: "app2.default.svc.cluster.local" bunkerized-nginx.REMOTE_PHP_PATH: "/var/www/html" bunkerized-nginx.AUTO_LETS_ENCRYPT: "yes" spec: diff --git a/examples/kubernetes/reverse-proxy.yml b/examples/kubernetes/reverse-proxy.yml index 5d3237c..629b4a7 100644 --- a/examples/kubernetes/reverse-proxy.yml +++ b/examples/kubernetes/reverse-proxy.yml @@ -29,7 +29,7 @@ metadata: bunkerized-nginx.SERVER_NAME: "app3.example.com" bunkerized-nginx.USE_REVERSE_PROXY: "yes" bunkerized-nginx.REVERSE_PROXY_URL: "/" - bunkerized-nginx.REVERSE_PROXY_HOST: "http://app3" + bunkerized-nginx.REVERSE_PROXY_HOST: "http://app3.default.svc.cluster.local" bunkerized-nginx.AUTO_LETS_ENCRYPT: "yes" spec: type: ClusterIP