This commit is contained in:
Sparky
2025-10-25 15:49:41 +01:00
parent ad70d72225
commit 0595220082
15 changed files with 417 additions and 6 deletions

View File

@@ -55,6 +55,14 @@ https://docker.site.quack-lab.dev {
header -Server header -Server
try_files {path} /index.html /index.php try_files {path} /index.html /index.php
} }
https://elasticsearch.site.quack-lab.dev {
encode zstd gzip
handle_path /* {
reverse_proxy 10.0.66.2:9200
}
header -Server
try_files {path} /index.html /index.php
}
https://evebase.site.quack-lab.dev { https://evebase.site.quack-lab.dev {
handle_path /* { handle_path /* {
reverse_proxy 10.0.50.3:8080 reverse_proxy 10.0.50.3:8080
@@ -121,6 +129,14 @@ https://jelly.site.quack-lab.dev {
header -Server header -Server
try_files {path} /index.html /index.php try_files {path} /index.html /index.php
} }
https://kibana.site.quack-lab.dev {
encode zstd gzip
handle_path /* {
reverse_proxy 10.0.66.3:5601
}
header -Server
try_files {path} /index.html /index.php
}
https://meili-web.site.quack-lab.dev { https://meili-web.site.quack-lab.dev {
encode zstd gzip encode zstd gzip
handle_path /* { handle_path /* {

File diff suppressed because one or more lines are too long

View File

@@ -0,0 +1,49 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,9 @@
{
"sans": [
"elasticsearch.site.quack-lab.dev"
],
"issuer_data": {
"url": "https://acme-v02.api.letsencrypt.org/acme/cert/06fa5d3a5394405f9bf40236603af933462e",
"ca": "https://acme-v02.api.letsencrypt.org/directory"
}
}

View File

@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIBVJWXok/6O4bDkz/J/JJJpt2fpJqtWzakzRQ/I+rm4moAoGCCqGSM49
AwEHoUQDQgAE992fKg014Idmwg6y8WqrK1++Jvtsn55kvPNFh/Jw9iF3Q+kRLQxv
BdOK+xyf4sVjvp5DyT6vFo+GwZuakpckxA==
-----END EC PRIVATE KEY-----

View File

@@ -0,0 +1,49 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,9 @@
{
"sans": [
"kibana.site.quack-lab.dev"
],
"issuer_data": {
"url": "https://acme-v02.api.letsencrypt.org/acme/cert/05646bf23d3f1ca87e2af8a0fb413cbb6523",
"ca": "https://acme-v02.api.letsencrypt.org/directory"
}
}

View File

@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIHb64do2VJc7xq+CfzYBPkgskVHxDWy3Tn2mirK1sVXMoAoGCCqGSM49
AwEHoUQDQgAElM6m//iyyASgAB/JJTj+SszSLUEWBjcx7Zb469rVlRVRzHHKxLlq
lrARlmbmCR/naRMKek+kFZ5aSuAme2mKjA==
-----END EC PRIVATE KEY-----

View File

@@ -0,0 +1,49 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,9 @@
{
"sans": [
"victoria.site.quack-lab.dev"
],
"issuer_data": {
"url": "https://acme-v02.api.letsencrypt.org/acme/cert/06cdeb444f2145759104c022362e7f8d975a",
"ca": "https://acme-v02.api.letsencrypt.org/directory"
}
}

View File

@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIDR1JB+No8CUsqLz1t/KWUyRWxh1KC+FPrMzNM2VIJM2oAoGCCqGSM49
AwEHoUQDQgAE5HTUCj2pxACiMkNlv7ZDBAIEBAYBwZjxuM2Xnu/+9nZYKYK7dFU+
Hn9dQEe+qnpR78UdnZCLYbQUa5ogPPvQww==
-----END EC PRIVATE KEY-----

View File

@@ -1 +1 @@
{"tls":{"timestamp":"2025-10-21T12:16:59.256116535Z","instance_id":"dbe630cc-bc9f-443e-b311-aec406294c5c"}} {"tls":{"timestamp":"2025-10-25T11:15:01.784947934Z","instance_id":"dbe630cc-bc9f-443e-b311-aec406294c5c"}}

View File

@@ -3,15 +3,15 @@ SERVICE_FQDN_GRAFANA=grafana.site.quack-lab.dev
SERVICE_FQDN_GRAFANA_43433=grafana.site.quack-lab.dev SERVICE_FQDN_GRAFANA_43433=grafana.site.quack-lab.dev
SERVICE_FQDN_PROMETHEUS=prom.site.quack-lab.dev SERVICE_FQDN_PROMETHEUS=prom.site.quack-lab.dev
SERVICE_FQDN_PROMETHEUS_43261=prom.site.quack-lab.dev SERVICE_FQDN_PROMETHEUS_43261=prom.site.quack-lab.dev
SERVICE_FQDN_VICTORIAMETRICS=victoria-site.quack-lab.dev SERVICE_FQDN_VICTORIAMETRICS=victoria.site.quack-lab.dev
SERVICE_FQDN_VICTORIAMETRICS_8428=victoria-site.quack-lab.dev SERVICE_FQDN_VICTORIAMETRICS_8428=victoria.site.quack-lab.dev
SERVICE_PASSWORD_GRAFANA=9@^F@93qHv48JXHvi3Bf SERVICE_PASSWORD_GRAFANA=9@^F@93qHv48JXHvi3Bf
SERVICE_URL_GRAFANA=https://grafana.site.quack-lab.dev SERVICE_URL_GRAFANA=https://grafana.site.quack-lab.dev
SERVICE_URL_GRAFANA_43433=https://grafana.site.quack-lab.dev SERVICE_URL_GRAFANA_43433=https://grafana.site.quack-lab.dev
SERVICE_URL_PROMETHEUS=https://prom.site.quack-lab.dev SERVICE_URL_PROMETHEUS=https://prom.site.quack-lab.dev
SERVICE_URL_PROMETHEUS_43261=https://prom.site.quack-lab.dev SERVICE_URL_PROMETHEUS_43261=https://prom.site.quack-lab.dev
SERVICE_URL_VICTORIAMETRICS=https://victoria-site.quack-lab.dev SERVICE_URL_VICTORIAMETRICS=https://victoria.site.quack-lab.dev
SERVICE_URL_VICTORIAMETRICS_8428=https://victoria-site.quack-lab.dev SERVICE_URL_VICTORIAMETRICS_8428=https://victoria.site.quack-lab.dev
GF_SECURITY_ADMIN_PASSWORD=${SERVICE_PASSWORD_GRAFANA} GF_SECURITY_ADMIN_PASSWORD=${SERVICE_PASSWORD_GRAFANA}
GF_SERVER_DOMAIN=${SERVICE_URL_GRAFANA} GF_SERVER_DOMAIN=${SERVICE_URL_GRAFANA}
GF_SERVER_ROOT_URL=${SERVICE_URL_GRAFANA} GF_SERVER_ROOT_URL=${SERVICE_URL_GRAFANA}

View File

@@ -0,0 +1,23 @@
SERVICE_NAME_ELASTICSEARCH=elasticsearch
SERVICE_NAME_KIBANA=kibana
SERVICE_NAME_SETUP=setup
SERVICE_FQDN_ELASTICSEARCH=elasticsearch.site.quack-lab.dev
SERVICE_FQDN_KIBANA=kibana.site.quack-lab.dev
SERVICE_FQDN_KIBANA_5601=kibana.site.quack-lab.dev
SERVICE_PASSWORD_ELASTICSEARCH=5cOyhm3c9qWXUHyj1lureBetPPfKfkvE
SERVICE_PASSWORD_KIBANA=NltSS7U9jfnQQxVa4pbtokeInyrs50Wc
SERVICE_PASSWORD_XPACKENCRYPTEDSAVEDOBJECTS=Au0SQHRUMb8XJ97BDmX6bnCAkMXYVxgX
SERVICE_PASSWORD_XPACKREPORTING=kCr7fKfoEkEoty9yKcYCf60UnUialzxc
SERVICE_PASSWORD_XPACKSECURITY=npxvoZXXOh4iKBdqWjlk15lZjhK8YwbL
SERVICE_URL_ELASTICSEARCH=https://elasticsearch.site.quack-lab.dev
SERVICE_URL_KIBANA=https://kibana.site.quack-lab.dev
SERVICE_URL_KIBANA_5601=https://kibana.site.quack-lab.dev
ELASTIC_PASSWORD=${SERVICE_PASSWORD_ELASTICSEARCH}
ELASTICSEARCH_PASSWORD=${SERVICE_PASSWORD_KIBANA}
KIBANA_PASSWORD=${SERVICE_PASSWORD_KIBANA}
SERVER_NAME=${SERVICE_URL_KIBANA}
SERVER_PUBLICBASEURL=${SERVICE_URL_KIBANA}
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY=${SERVICE_PASSWORD_XPACKENCRYPTEDSAVEDOBJECTS}
XPACK_REPORTING_ENCRYPTIONKEY=${SERVICE_PASSWORD_XPACKREPORTING}
XPACK_SECURITY_ENCRYPTIONKEY=${SERVICE_PASSWORD_XPACKSECURITY}
TELEMETRY_OPTIN=false

View File

@@ -0,0 +1,183 @@
services:
elasticsearch:
image: 'elastic/elasticsearch:9.1.2'
container_name: elasticsearch-swgw440sc448k4cc88w08k8g
restart: unless-stopped
environment:
ELASTIC_PASSWORD: '${SERVICE_PASSWORD_ELASTICSEARCH}'
ES_JAVA_OPTS: '-Xms512m -Xmx512m'
discovery.type: single-node
bootstrap.memory_lock: 'true'
xpack.security.enabled: 'true'
xpack.security.http.ssl.enabled: 'false'
xpack.security.transport.ssl.enabled: 'false'
COOLIFY_RESOURCE_UUID: swgw440sc448k4cc88w08k8g
COOLIFY_CONTAINER_NAME: elasticsearch-swgw440sc448k4cc88w08k8g
COOLIFY_FQDN: elasticsearch.site.quack-lab.dev
COOLIFY_URL: 'https://elasticsearch.site.quack-lab.dev'
SERVICE_NAME_ELASTICSEARCH: elasticsearch
SERVICE_NAME_KIBANA: kibana
SERVICE_NAME_SETUP: setup
volumes:
- '/etc/localtime:/etc/localtime:ro'
- 'swgw440sc448k4cc88w08k8g_elasticsearch-data:/usr/share/elasticsearch/data'
healthcheck:
test:
- CMD-SHELL
- 'curl --user elastic:${SERVICE_PASSWORD_ELASTICSEARCH} --silent --fail http://localhost:9200/_cluster/health || exit 1'
interval: 10s
timeout: 10s
retries: 24
labels:
- coolify.managed=true
- coolify.version=4.0.0-beta.434
- coolify.serviceId=44
- coolify.type=service
- coolify.name=elasticsearch-swgw440sc448k4cc88w08k8g
- coolify.resourceName=elasticsearch
- coolify.projectName=services
- coolify.serviceName=elasticsearch
- coolify.environmentName=production
- coolify.pullRequestId=0
- coolify.service.subId=78
- coolify.service.subType=application
- coolify.service.subName=elasticsearch
- traefik.enable=true
- traefik.http.middlewares.gzip.compress=true
- traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https
- traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-elasticsearch.entryPoints=http
- traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-elasticsearch.middlewares=redirect-to-https
- 'traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-elasticsearch.rule=Host(`elasticsearch.site.quack-lab.dev`) && PathPrefix(`/`)'
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-elasticsearch.entryPoints=https
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-elasticsearch.middlewares=gzip
- 'traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-elasticsearch.rule=Host(`elasticsearch.site.quack-lab.dev`) && PathPrefix(`/`)'
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-elasticsearch.tls.certresolver=letsencrypt
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-elasticsearch.tls=true
- 'caddy_0.encode=zstd gzip'
- 'caddy_0.handle_path.0_reverse_proxy={{upstreams 9200}}'
- 'caddy_0.handle_path=/*'
- caddy_0.header=-Server
- 'caddy_0.try_files={path} /index.html /index.php'
- 'caddy_0=https://elasticsearch.site.quack-lab.dev'
- caddy_ingress_network=swgw440sc448k4cc88w08k8g
networks:
swgw440sc448k4cc88w08k8g: null
kibana:
image: 'kibana:9.1.2'
container_name: kibana-swgw440sc448k4cc88w08k8g
restart: unless-stopped
environment:
SERVICE_URL_KIBANA_5601: 'https://kibana.site.quack-lab.dev'
SERVER_NAME: '${SERVICE_URL_KIBANA}'
SERVER_PUBLICBASEURL: '${SERVICE_URL_KIBANA}'
ELASTICSEARCH_HOSTS: 'http://elasticsearch:9200'
ELASTICSEARCH_USERNAME: kibana_system
ELASTICSEARCH_PASSWORD: '${SERVICE_PASSWORD_KIBANA}'
XPACK_SECURITY_ENCRYPTIONKEY: '${SERVICE_PASSWORD_XPACKSECURITY}'
XPACK_REPORTING_ENCRYPTIONKEY: '${SERVICE_PASSWORD_XPACKREPORTING}'
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: '${SERVICE_PASSWORD_XPACKENCRYPTEDSAVEDOBJECTS}'
TELEMETRY_OPTIN: '${TELEMETRY_OPTIN:-false}'
COOLIFY_RESOURCE_UUID: swgw440sc448k4cc88w08k8g
COOLIFY_CONTAINER_NAME: kibana-swgw440sc448k4cc88w08k8g
COOLIFY_FQDN: kibana.site.quack-lab.dev
COOLIFY_URL: 'https://kibana.site.quack-lab.dev'
SERVICE_NAME_ELASTICSEARCH: elasticsearch
SERVICE_NAME_KIBANA: kibana
SERVICE_NAME_SETUP: setup
volumes:
- '/etc/localtime:/etc/localtime:ro'
- 'swgw440sc448k4cc88w08k8g_kibana-data:/usr/share/kibana/data'
depends_on:
setup:
condition: service_completed_successfully
healthcheck:
test:
- CMD-SHELL
- 'curl -s http://localhost:5601/api/status | grep -q ''"level":"available"'' || exit 1'
interval: 10s
timeout: 10s
retries: 120
labels:
- coolify.managed=true
- coolify.version=4.0.0-beta.434
- coolify.serviceId=44
- coolify.type=service
- coolify.name=kibana-swgw440sc448k4cc88w08k8g
- coolify.resourceName=elasticsearch
- coolify.projectName=services
- coolify.serviceName=kibana
- coolify.environmentName=production
- coolify.pullRequestId=0
- coolify.service.subId=79
- coolify.service.subType=application
- coolify.service.subName=kibana
- traefik.enable=true
- traefik.http.middlewares.gzip.compress=true
- traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https
- traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-kibana.entryPoints=http
- traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-kibana.middlewares=redirect-to-https
- 'traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-kibana.rule=Host(`kibana.site.quack-lab.dev`) && PathPrefix(`/`)'
- traefik.http.routers.http-0-swgw440sc448k4cc88w08k8g-kibana.service=http-0-swgw440sc448k4cc88w08k8g-kibana
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.entryPoints=https
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.middlewares=gzip
- 'traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.rule=Host(`kibana.site.quack-lab.dev`) && PathPrefix(`/`)'
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.service=https-0-swgw440sc448k4cc88w08k8g-kibana
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.tls.certresolver=letsencrypt
- traefik.http.routers.https-0-swgw440sc448k4cc88w08k8g-kibana.tls=true
- traefik.http.services.http-0-swgw440sc448k4cc88w08k8g-kibana.loadbalancer.server.port=5601
- traefik.http.services.https-0-swgw440sc448k4cc88w08k8g-kibana.loadbalancer.server.port=5601
- 'caddy_0.encode=zstd gzip'
- 'caddy_0.handle_path.0_reverse_proxy={{upstreams 5601}}'
- 'caddy_0.handle_path=/*'
- caddy_0.header=-Server
- 'caddy_0.try_files={path} /index.html /index.php'
- 'caddy_0=https://kibana.site.quack-lab.dev'
- caddy_ingress_network=swgw440sc448k4cc88w08k8g
networks:
swgw440sc448k4cc88w08k8g: null
setup:
image: 'elastic/elasticsearch:9.1.2'
container_name: setup-swgw440sc448k4cc88w08k8g
depends_on:
elasticsearch:
condition: service_healthy
environment:
ELASTIC_PASSWORD: '${SERVICE_PASSWORD_ELASTICSEARCH}'
KIBANA_PASSWORD: '${SERVICE_PASSWORD_KIBANA}'
COOLIFY_RESOURCE_UUID: swgw440sc448k4cc88w08k8g
COOLIFY_CONTAINER_NAME: setup-swgw440sc448k4cc88w08k8g
SERVICE_NAME_ELASTICSEARCH: elasticsearch
SERVICE_NAME_KIBANA: kibana
SERVICE_NAME_SETUP: setup
entrypoint:
- sh
- '-c'
- "echo \"Setting up Kibana user password...\"\n\nuntil curl -s -u \"elastic:${ELASTIC_PASSWORD}\" http://elasticsearch:9200/_cluster/health | grep -q '\"status\":\"green\\|yellow\"'; do\n echo \"Waiting for Elasticsearch...\"\n sleep 2\ndone\n\necho \"Setting password for kibana_system user...\"\ncurl -s -X POST -u \"elastic:${ELASTIC_PASSWORD}\" \\\n -H \"Content-Type: application/json\" \\\n http://elasticsearch:9200/_security/user/kibana_system/_password \\\n -d \"{\\\"password\\\":\\\"${KIBANA_PASSWORD}\\\"}\" || exit 1\n\necho \"Kibana setup completed successfully\""
restart: 'no'
labels:
- coolify.managed=true
- coolify.version=4.0.0-beta.434
- coolify.serviceId=44
- coolify.type=service
- coolify.name=setup-swgw440sc448k4cc88w08k8g
- coolify.resourceName=elasticsearch
- coolify.projectName=services
- coolify.serviceName=setup
- coolify.environmentName=production
- coolify.pullRequestId=0
- coolify.service.subId=80
- coolify.service.subType=application
- coolify.service.subName=setup
networks:
swgw440sc448k4cc88w08k8g: null
volumes:
swgw440sc448k4cc88w08k8g_elasticsearch-data:
name: swgw440sc448k4cc88w08k8g_elasticsearch-data
swgw440sc448k4cc88w08k8g_kibana-data:
name: swgw440sc448k4cc88w08k8g_kibana-data
networks:
swgw440sc448k4cc88w08k8g:
name: swgw440sc448k4cc88w08k8g
external: true
configs: { }
secrets: { }