feat: experimental caddy support

2024-03-11 15:08:05 +01:00
parent 5d3de967f0
commit 34d6a12d95
18 changed files with 252 additions and 113 deletions
--- a/bootstrap/helpers/docker.php
+++ b/bootstrap/helpers/docker.php
@@ -1,5 +1,6 @@
 <?php

+use App\Enums\ProxyTypes;
 use App\Models\Application;
 use App\Models\ApplicationPreview;
 use App\Models\Server;
@@ -215,6 +216,46 @@ function generateServiceSpecificFqdns(ServiceApplication|Application $resource,
    }
    return $payload;
 }
+function fqdnLabelsForCaddy(string $network, string $uuid, Collection $domains, bool $is_force_https_enabled = false, $onlyPort = null, ?Collection $serviceLabels = null, ?bool $is_gzip_enabled = true, ?bool $is_stripprefix_enabled = true, ?string $service_name = null)
+{
+    $labels = collect([]);
+    foreach ($domains as $loop => $domain) {
+        $loop = $loop;
+        $url = Url::fromString($domain);
+        $host = $url->getHost();
+        $path = $url->getPath();
+        // $stripped_path = str($path)->replaceEnd('/', '');
+
+        $schema = $url->getScheme();
+        $port = $url->getPort();
+        if (is_null($port) && !is_null($onlyPort)) {
+            $port = $onlyPort;
+        }
+        $labels->push("caddy_{$loop}={$schema}://{$host}");
+        $labels->push("caddy_{$loop}.header=-Server");
+
+        if ($serviceLabels) {
+            $labels->push("caddy_ingress_network={$uuid}");
+            $labels->push("caddy_{$loop}.reverse_proxy={{upstreams}}");
+        } else {
+            $labels->push("caddy_ingress_network={$network}");
+            if ($port) {
+                $labels->push("caddy_{$loop}.handle_path.{$loop}_reverse_proxy={{upstreams $port}}");
+            } else {
+                $labels->push("caddy_{$loop}.handle_path.{$loop}_reverse_proxy={{upstreams}}");
+            }
+            $labels->push("caddy_{$loop}.handle_path={$path}*");
+        }
+
+        if ($is_gzip_enabled) {
+            $labels->push("caddy_{$loop}.encode=zstd gzip");
+        }
+        if (isDev()) {
+            // $labels->push("caddy_{$loop}.tls=internal");
+        }
+    }
+    return $labels->sort();
+}
 function fqdnLabelsForTraefik(string $uuid, Collection $domains, bool $is_force_https_enabled = false, $onlyPort = null, ?Collection $serviceLabels = null, ?bool $is_gzip_enabled = true, ?bool $is_stripprefix_enabled = true, ?string $service_name = null)
 {
    $labels = collect([]);
@@ -395,7 +436,7 @@ function generateLabelsApplication(Application $application, ?ApplicationPreview
        } else {
            $domains = Str::of(data_get($application, 'fqdn'))->explode(',');
        }
-        // Add Traefik labels no matter which proxy is selected
+        // Add Traefik labels
        $labels = $labels->merge(fqdnLabelsForTraefik(
            uuid: $appUuid,
            domains: $domains,
@@ -404,6 +445,16 @@ function generateLabelsApplication(Application $application, ?ApplicationPreview
            is_gzip_enabled: $application->isGzipEnabled(),
            is_stripprefix_enabled: $application->isStripprefixEnabled()
        ));
+        // Add Caddy labels
+        $labels = $labels->merge(fqdnLabelsForCaddy(
+            network: $application->destination->network,
+            uuid: $appUuid,
+            domains: $domains,
+            onlyPort: $onlyPort,
+            is_force_https_enabled: $application->isForceHttpsEnabled(),
+            is_gzip_enabled: $application->isGzipEnabled(),
+            is_stripprefix_enabled: $application->isStripprefixEnabled()
+        ));
    }
    return $labels->all();
 }
--- a/bootstrap/helpers/proxy.php
+++ b/bootstrap/helpers/proxy.php
@@ -7,12 +7,7 @@ use App\Models\Server;
 use Spatie\Url\Url;
 use Symfony\Component\Yaml\Yaml;

-function get_proxy_path()
-{
-    $base_path = config('coolify.base_config_path');
-    $proxy_path = "$base_path/proxy";
-    return $proxy_path;
-}
+
 function connectProxyToNetworks(Server $server)
 {
    if ($server->isSwarm()) {
@@ -75,7 +70,9 @@ function connectProxyToNetworks(Server $server)
 }
 function generate_default_proxy_configuration(Server $server)
 {
-    $proxy_path = get_proxy_path();
+    $proxy_path = $server->proxyPath();
+    $proxy_type = $server->proxyType();
+
    if ($server->isSwarm()) {
        $networks = collect($server->swarmDockers)->map(function ($docker) {
            return $docker['network'];
@@ -98,93 +95,129 @@ function generate_default_proxy_configuration(Server $server)
            "external" => true,
        ];
    });
-    $labels = [
-        "traefik.enable=true",
-        "traefik.http.routers.traefik.entrypoints=http",
-        "traefik.http.routers.traefik.service=api@internal",
-        "traefik.http.services.traefik.loadbalancer.server.port=8080",
-        "coolify.managed=true",
-    ];
-    $config = [
-        "version" => "3.8",
-        "networks" => $array_of_networks->toArray(),
-        "services" => [
-            "traefik" => [
-                "container_name" => "coolify-proxy",
-                "image" => "traefik:v2.10",
-                "restart" => RESTART_MODE,
-                "extra_hosts" => [
-                    "host.docker.internal:host-gateway",
+    if ($proxy_type === 'TRAEFIK_V2') {
+        $labels = [
+            "traefik.enable=true",
+            "traefik.http.routers.traefik.entrypoints=http",
+            "traefik.http.routers.traefik.service=api@internal",
+            "traefik.http.services.traefik.loadbalancer.server.port=8080",
+            "coolify.managed=true",
+        ];
+        $config = [
+            "version" => "3.8",
+            "networks" => $array_of_networks->toArray(),
+            "services" => [
+                "traefik" => [
+                    "container_name" => "coolify-proxy",
+                    "image" => "traefik:v2.10",
+                    "restart" => RESTART_MODE,
+                    "extra_hosts" => [
+                        "host.docker.internal:host-gateway",
+                    ],
+                    "networks" => $networks->toArray(),
+                    "ports" => [
+                        "80:80",
+                        "443:443",
+                        "8080:8080",
+                    ],
+                    "healthcheck" => [
+                        "test" => "wget -qO- http://localhost:80/ping || exit 1",
+                        "interval" => "4s",
+                        "timeout" => "2s",
+                        "retries" => 5,
+                    ],
+                    "volumes" => [
+                        "/var/run/docker.sock:/var/run/docker.sock:ro",
+                        "{$proxy_path}:/traefik",
+                    ],
+                    "command" => [
+                        "--ping=true",
+                        "--ping.entrypoint=http",
+                        "--api.dashboard=true",
+                        "--api.insecure=false",
+                        "--entrypoints.http.address=:80",
+                        "--entrypoints.https.address=:443",
+                        "--entrypoints.http.http.encodequerysemicolons=true",
+                        "--entryPoints.http.http2.maxConcurrentStreams=50",
+                        "--entrypoints.https.http.encodequerysemicolons=true",
+                        "--entryPoints.https.http2.maxConcurrentStreams=50",
+                        "--providers.docker.exposedbydefault=false",
+                        "--providers.file.directory=/traefik/dynamic/",
+                        "--providers.file.watch=true",
+                        "--certificatesresolvers.letsencrypt.acme.httpchallenge=true",
+                        "--certificatesresolvers.letsencrypt.acme.storage=/traefik/acme.json",
+                        "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=http",
+                    ],
+                    "labels" => $labels,
                ],
-                "networks" => $networks->toArray(),
-                "ports" => [
-                    "80:80",
-                    "443:443",
-                    "8080:8080",
-                ],
-                "healthcheck" => [
-                    "test" => "wget -qO- http://localhost:80/ping || exit 1",
-                    "interval" => "4s",
-                    "timeout" => "2s",
-                    "retries" => 5,
-                ],
-                "volumes" => [
-                    "/var/run/docker.sock:/var/run/docker.sock:ro",
-                    "{$proxy_path}:/traefik",
-                ],
-                "command" => [
-                    "--ping=true",
-                    "--ping.entrypoint=http",
-                    "--api.dashboard=true",
-                    "--api.insecure=false",
-                    "--entrypoints.http.address=:80",
-                    "--entrypoints.https.address=:443",
-                    "--entrypoints.http.http.encodequerysemicolons=true",
-                    "--entryPoints.http.http2.maxConcurrentStreams=50",
-                    "--entrypoints.https.http.encodequerysemicolons=true",
-                    "--entryPoints.https.http2.maxConcurrentStreams=50",
-                    "--providers.docker.exposedbydefault=false",
-                    "--providers.file.directory=/traefik/dynamic/",
-                    "--providers.file.watch=true",
-                    "--certificatesresolvers.letsencrypt.acme.httpchallenge=true",
-                    "--certificatesresolvers.letsencrypt.acme.storage=/traefik/acme.json",
-                    "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=http",
-                ],
-                "labels" => $labels,
            ],
-        ],
-    ];
-    if (isDev()) {
-        // $config['services']['traefik']['command'][] = "--log.level=debug";
-        $config['services']['traefik']['command'][] = "--accesslog.filepath=/traefik/access.log";
-        $config['services']['traefik']['command'][] = "--accesslog.bufferingsize=100";
-    }
-    if ($server->isSwarm()) {
-        data_forget($config, 'services.traefik.container_name');
-        data_forget($config, 'services.traefik.restart');
-        data_forget($config, 'services.traefik.labels');
+        ];
+        if (isDev()) {
+            // $config['services']['traefik']['command'][] = "--log.level=debug";
+            $config['services']['traefik']['command'][] = "--accesslog.filepath=/traefik/access.log";
+            $config['services']['traefik']['command'][] = "--accesslog.bufferingsize=100";
+        }
+        if ($server->isSwarm()) {
+            data_forget($config, 'services.traefik.container_name');
+            data_forget($config, 'services.traefik.restart');
+            data_forget($config, 'services.traefik.labels');

-        $config['services']['traefik']['command'][] = "--providers.docker.swarmMode=true";
-        $config['services']['traefik']['deploy'] = [
-            "labels" => $labels,
-            "placement" => [
-                "constraints" => [
-                    "node.role==manager",
+            $config['services']['traefik']['command'][] = "--providers.docker.swarmMode=true";
+            $config['services']['traefik']['deploy'] = [
+                "labels" => $labels,
+                "placement" => [
+                    "constraints" => [
+                        "node.role==manager",
+                    ],
+                ],
+            ];
+        } else {
+            $config['services']['traefik']['command'][] = "--providers.docker=true";
+        }
+    } else if ($proxy_type === 'CADDY') {
+        $config = [
+            "version" => "3.8",
+            "networks" => $array_of_networks->toArray(),
+            "services" => [
+                "caddy" => [
+                    "container_name" => "coolify-proxy",
+                    "image" => "lucaslorentz/caddy-docker-proxy:2.8-alpine",
+                    "restart" => RESTART_MODE,
+                    "extra_hosts" => [
+                        "host.docker.internal:host-gateway",
+                    ],
+                    "networks" => $networks->toArray(),
+                    "ports" => [
+                        "80:80",
+                        "443:443",
+                    ],
+                    // "healthcheck" => [
+                    //     "test" => "wget -qO- http://localhost:80|| exit 1",
+                    //     "interval" => "4s",
+                    //     "timeout" => "2s",
+                    //     "retries" => 5,
+                    // ],
+                    "volumes" => [
+                        "/var/run/docker.sock:/var/run/docker.sock:ro",
+                        "{$proxy_path}/config:/config",
+                        "{$proxy_path}/data:/data",
+                    ],
                ],
            ],
        ];
    } else {
-        $config['services']['traefik']['command'][] = "--providers.docker=true";
+        return null;
    }
+
    $config = Yaml::dump($config, 12, 2);
    SaveConfiguration::run($server, $config);
    return $config;
 }
 function setup_dynamic_configuration()
 {
-    $dynamic_config_path = get_proxy_path() . "/dynamic";
    $settings = InstanceSettings::get();
    $server = Server::find(0);
+    $dynamic_config_path = $server->proxyPath() . "/dynamic";
    if ($server) {
        $file = "$dynamic_config_path/coolify.yaml";
        if (empty($settings->fqdn)) {
@@ -308,7 +341,7 @@ function setup_dynamic_configuration()
 }
 function setup_default_redirect_404(string|null $redirect_url, Server $server)
 {
-    $traefik_dynamic_conf_path = get_proxy_path() . "/dynamic";
+    $traefik_dynamic_conf_path = $server->proxyPath() . "/dynamic";
    $traefik_default_redirect_file = "$traefik_dynamic_conf_path/default_redirect_404.yaml";
    if (empty($redirect_url)) {
        instant_remote_process([
--- a/bootstrap/helpers/shared.php
+++ b/bootstrap/helpers/shared.php
@@ -1056,6 +1056,16 @@ function parseDockerComposeFile(Service|Application $resource, bool $isNew = fal
                            is_stripprefix_enabled: $savedService->isStripprefixEnabled(),
                            service_name: $serviceName
                        ));
+                        $serviceLabels = $serviceLabels->merge(fqdnLabelsForCaddy(
+                            network: $resource->destination->network,
+                            uuid: $resource->uuid,
+                            domains: $fqdns,
+                            is_force_https_enabled: true,
+                            serviceLabels: $serviceLabels,
+                            is_gzip_enabled: $savedService->isGzipEnabled(),
+                            is_stripprefix_enabled: $savedService->isStripprefixEnabled(),
+                            service_name: $serviceName
+                        ));
                    }
                }
                if ($resource->server->isLogDrainEnabled() && $savedService->isLogDrainEnabled()) {
@@ -1495,7 +1505,17 @@ function parseDockerComposeFile(Service|Application $resource, bool $isNew = fal
                                return $preview_fqdn;
                            });
                        }
-                        $serviceLabels = $serviceLabels->merge(fqdnLabelsForTraefik($uuid, $fqdns, serviceLabels: $serviceLabels));
+                        $serviceLabels = $serviceLabels->merge(fqdnLabelsForTraefik(
+                            uuid: $uuid,
+                            domains: $fqdns,
+                            serviceLabels: $serviceLabels
+                        ));
+                        $serviceLabels = $serviceLabels->merge(fqdnLabelsForCaddy(
+                            network: $resource->destination->network,
+                            uuid: $uuid,
+                            domains: $fqdns,
+                            serviceLabels: $serviceLabels
+                        ));
                    }
                }
            }