TL;DL

사용하는 것

절차

서버 준비

다양한 파일 준비

$ ls -la
-rw-r--r-- 1 suecharo suecharo  432 Jul 30 10:10 config.json
-rw-rw-r-- 1 suecharo suecharo  764 Aug  1 10:48 docker-compose.yml
-r--r--r-- 1 root   root   46 Jul 30 09:27 .htpasswd
-rw-r--r-- 1 suecharo suecharo 1228 Jul 30 09:28 nginx.conf

docker-compose.yml

version: '3'
services:
  app:
    image: hackmdio/hackmd:latest
    restart: always
    environment:
      - HMD_DB_URL=postgres://hackmd:hackmdpass@database:5432/hackmd
    volumes:
      - ${PWD}/config.json:/hackmd/config.json
      - app_data:/hackmd
  database:
    image: postgres:9.6-alpine
    environment:
      - POSTGRES_USER=hackmd
      - POSTGRES_PASSWORD=hackmdpass
      - POSTGRES_DB=hackmd
    volumes:
      - database:/var/lib/postgresql/data
    restart: always
  nginx:
    image: nginx:latest
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /etc/letsencrypt:/etc/letsencrypt
      - ${PWD}/.htpasswd:/etc/nginx/.htpasswd
      - ${PWD}/nginx.conf:/etc/nginx/nginx.conf

volumes:
  database:
  app_data:

$ apt install -y apache2-utils
$ sudo htpasswd -c -b ${HackMD_dir}/.htpasswd ${user_name} ${Password}
$ sudo chmod 444 ${HackMD_dir}/.htpasswd

Let's Encrypt

nginx.conf

user nginx;
worker_processes auto;
error_log  /var/log/nginx/error.log warn;
pid /run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    access_log /var/log/nginx/access.log;
    sendfile on;
    keepalive_timeout 65;
    server_names_hash_max_size 1024;
    client_max_body_size 10M;

    server_tokens off;

    # include /etc/nginx/conf.d/*.conf;

    server {
        listen 80;
        server_name ${your_fqdn};
        return 301 https://$host$request_uri;
    }

    server {
        listen 443 default ssl;
        server_name ${your_fqdn};
        ssl_certificate /etc/letsencrypt/live/${your_fqdn}/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/${your_fqdn}/privkey.pem;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        charset utf-8;
        auth_basic 'Secret Zone';
        auth_basic_user_file /etc/nginx/.htpasswd;

        location / {
            proxy_pass http://app:3000;
        }
    }
}

conf.json

{
    "production": {
        "allowAnonymous": false,
        "allowAnonymousEdits": false,
        "defaultPermission": "editable",
        "email": true,
        "db": {
            "username": "hackmd",
            "password": "hackmdpass",
            "database": "hackmd",
            "host": "database",
            "port": "5432",
            "dialect": "postgres"
        },
        "imageUploadType": "filesystem"
    }
}

기동·동작 확인

$ docker-compose up -d