feat: removed wordpress
This commit is contained in:
parent
2939d619b8
commit
491c637117
8 changed files with 0 additions and 237 deletions
|
|
@ -34,15 +34,6 @@ docker:
|
||||||
port: 3080
|
port: 3080
|
||||||
user: 1003
|
user: 1003
|
||||||
url: pw.mgutzeit.de
|
url: pw.mgutzeit.de
|
||||||
wordpress:
|
|
||||||
name: WP_app
|
|
||||||
db_name: WP_db
|
|
||||||
web_name: WP_webserver
|
|
||||||
image: wordpress:6.7.1-fpm-alpine
|
|
||||||
db_image: mysql:8.4
|
|
||||||
port: 5080
|
|
||||||
user: 33
|
|
||||||
url: wordpress.mgutzeit.de
|
|
||||||
|
|
||||||
files:
|
files:
|
||||||
extra_dirs:
|
extra_dirs:
|
||||||
|
|
@ -53,8 +44,6 @@ docker:
|
||||||
- nextcloud/app
|
- nextcloud/app
|
||||||
- vaultwarden/vw-data
|
- vaultwarden/vw-data
|
||||||
- vaultwarden/vw-rclone-data/rclone
|
- vaultwarden/vw-rclone-data/rclone
|
||||||
- wordpress/nginx-conf
|
|
||||||
- wordpress/only-nginx-conf
|
|
||||||
|
|
||||||
conf_files:
|
conf_files:
|
||||||
#
|
#
|
||||||
|
|
@ -72,7 +61,6 @@ docker:
|
||||||
- name: nextcloud
|
- name: nextcloud
|
||||||
- name: jellyfin
|
- name: jellyfin
|
||||||
- name: vaultwarden
|
- name: vaultwarden
|
||||||
- name: wordpress
|
|
||||||
|
|
||||||
#
|
#
|
||||||
# andere Dateien
|
# andere Dateien
|
||||||
|
|
@ -107,28 +95,4 @@ docker:
|
||||||
mode: "0600"
|
mode: "0600"
|
||||||
name: vaultwarden
|
name: vaultwarden
|
||||||
force: no
|
force: no
|
||||||
- src: wordpress/nginx-conf/nginx.conf
|
|
||||||
dest: /opt/docker/wordpress/nginx-conf/nginx.conf
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
- src: wordpress/nginx-conf/options-ssl-nginx.conf
|
|
||||||
dest: /opt/docker/wordpress/nginx-conf/options-ssl-nginx.conf
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
- src: wordpress/only-nginx-conf/nginx.conf
|
|
||||||
dest: /opt/docker/wordpress/only-nginx-conf/nginx.conf
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
- src: wordpress/only-nginx-conf/options-ssl-nginx.conf
|
|
||||||
dest: /opt/docker/wordpress/only-nginx-conf/options-ssl-nginx.conf
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
- src: wordpress/.dockerignore
|
|
||||||
dest: /opt/docker/wordpress/.dockerignore
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
- src: wordpress/.env.crypt
|
|
||||||
dest: /opt/docker/wordpress/.env
|
|
||||||
user: 33
|
|
||||||
name: wordpress
|
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
.env
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
$ANSIBLE_VAULT;1.1;AES256
|
|
||||||
31616238636234396338363165646236643064326666356232326233376161343465663065333534
|
|
||||||
3437346562636537323362623763666662363632326163340a643233643339666437613061316562
|
|
||||||
34346631656239326466316334663334656538623130386465386332393631636336373063353439
|
|
||||||
6436376635663566610a663532653032353865336636623662383937306532643231316563636430
|
|
||||||
37663232633463613430323934316439303537346563343265303638376664313561643139393463
|
|
||||||
63643363303331393632623961613032366431386333363934633361313937363965316564373764
|
|
||||||
64313565636563313362653066366630623966313334363764303833666333333264383637633466
|
|
||||||
65346339323231613563386632373162343062393339646165373363316363643931383565373931
|
|
||||||
33393030373766313530346639316136643964643339356164366335336534313338
|
|
||||||
|
|
@ -1,51 +0,0 @@
|
||||||
services:
|
|
||||||
db:
|
|
||||||
image: {{ docker.containers.wordpress.db_image }}
|
|
||||||
container_name: {{ docker.containers.wordpress.db_name }}
|
|
||||||
restart: unless-stopped
|
|
||||||
env_file: .env
|
|
||||||
environment:
|
|
||||||
- MYSQL_DATABASE=wordpress
|
|
||||||
volumes:
|
|
||||||
- /mnt/content/wordpress/dbdata:/var/lib/mysql
|
|
||||||
command: '--mysql-native-password=ON'
|
|
||||||
networks:
|
|
||||||
- app-network
|
|
||||||
|
|
||||||
wordpress:
|
|
||||||
depends_on:
|
|
||||||
- db
|
|
||||||
image: {{ docker.containers.wordpress.image }}
|
|
||||||
container_name: {{ docker.containers.wordpress.name }}
|
|
||||||
restart: unless-stopped
|
|
||||||
env_file: .env
|
|
||||||
environment:
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
- WORDPRESS_DB_HOST=db:3306
|
|
||||||
- WORDPRESS_DB_USER=$MYSQL_USER
|
|
||||||
- WORDPRESS_DB_PASSWORD=$MYSQL_PASSWORD
|
|
||||||
- WORDPRESS_DB_NAME=wordpress
|
|
||||||
volumes:
|
|
||||||
- /mnt/content/wordpress/wpdata:/var/www/html
|
|
||||||
networks:
|
|
||||||
- app-network
|
|
||||||
|
|
||||||
webserver:
|
|
||||||
depends_on:
|
|
||||||
- wordpress
|
|
||||||
image: nginx:latest
|
|
||||||
container_name: {{ docker.containers.wordpress.web_name }}
|
|
||||||
restart: unless-stopped
|
|
||||||
ports:
|
|
||||||
- "{{ docker.containers.wordpress.port }}:80"
|
|
||||||
volumes:
|
|
||||||
- /mnt/content/wordpress/wpdata:/var/www/html
|
|
||||||
- ./nginx-conf:/etc/nginx/conf.d
|
|
||||||
environment:
|
|
||||||
- TZ=Europe/Berlin
|
|
||||||
networks:
|
|
||||||
- app-network
|
|
||||||
|
|
||||||
networks:
|
|
||||||
app-network:
|
|
||||||
driver: bridge
|
|
||||||
|
|
@ -1,43 +0,0 @@
|
||||||
server {
|
|
||||||
listen 80;
|
|
||||||
|
|
||||||
server_name localhost;
|
|
||||||
|
|
||||||
index index.php index.html index.htm;
|
|
||||||
|
|
||||||
root /var/www/html;
|
|
||||||
|
|
||||||
location ~ /.well-known/acme-challenge {
|
|
||||||
allow all;
|
|
||||||
root /var/www/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
try_files $uri $uri/ /index.php$is_args$args;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ \.php$ {
|
|
||||||
try_files $uri =404;
|
|
||||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
||||||
fastcgi_pass wordpress:9000;
|
|
||||||
fastcgi_index index.php;
|
|
||||||
include fastcgi_params;
|
|
||||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ /\.ht {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
|
|
||||||
location = /favicon.ico {
|
|
||||||
log_not_found off; access_log off;
|
|
||||||
}
|
|
||||||
location = /robots.txt {
|
|
||||||
log_not_found off; access_log off; allow all;
|
|
||||||
}
|
|
||||||
location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
|
|
||||||
expires max;
|
|
||||||
log_not_found off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
# This file contains important security parameters. If you modify this file
|
|
||||||
# manually, Certbot will be unable to automatically provide future security
|
|
||||||
# updates. Instead, Certbot will print and log an error message with a path to
|
|
||||||
# the up-to-date file that you will need to refer to when manually updating
|
|
||||||
# this file. Contents are based on https://ssl-config.mozilla.org
|
|
||||||
|
|
||||||
ssl_session_cache shared:le_nginx_SSL:10m;
|
|
||||||
ssl_session_timeout 1440m;
|
|
||||||
ssl_session_tickets off;
|
|
||||||
|
|
||||||
ssl_protocols TLSv1.2 TLSv1.3;
|
|
||||||
ssl_prefer_server_ciphers off;
|
|
||||||
|
|
||||||
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
|
|
||||||
|
|
@ -1,68 +0,0 @@
|
||||||
server {
|
|
||||||
listen 80;
|
|
||||||
listen [::]:80;
|
|
||||||
|
|
||||||
server_name {{ docker.containers.wordpress.url }};
|
|
||||||
|
|
||||||
location ~ /.well-known/acme-challenge {
|
|
||||||
allow all;
|
|
||||||
root /var/www/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
rewrite ^ https://$host$request_uri? permanent;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2;
|
|
||||||
listen [::]:443 ssl http2;
|
|
||||||
server_name {{ docker.containers.wordpress.url }};
|
|
||||||
index index.php index.html index.htm;
|
|
||||||
root /var/www/html;
|
|
||||||
|
|
||||||
server_tokens off;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/{{ docker.containers.wordpress.url }}/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/{{ docker.containers.wordpress.url }}/privkey.pem;
|
|
||||||
|
|
||||||
include /etc/nginx/conf.d/options-ssl-nginx.conf;
|
|
||||||
|
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
||||||
add_header X-XSS-Protection "1; mode=block" always;
|
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
|
||||||
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
|
||||||
add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
|
|
||||||
# add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
|
|
||||||
# enable strict transport security only if you understand the implications
|
|
||||||
|
|
||||||
location / {
|
|
||||||
try_files $uri $uri/ /index.php$is_args$args;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ \.php$ {
|
|
||||||
try_files $uri =404;
|
|
||||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
||||||
fastcgi_pass wordpress:9000;
|
|
||||||
fastcgi_index index.php;
|
|
||||||
include fastcgi_params;
|
|
||||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ /\.ht {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
|
|
||||||
location = /favicon.ico {
|
|
||||||
log_not_found off; access_log off;
|
|
||||||
}
|
|
||||||
location = /robots.txt {
|
|
||||||
log_not_found off; access_log off; allow all;
|
|
||||||
}
|
|
||||||
location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
|
|
||||||
expires max;
|
|
||||||
log_not_found off;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
# This file contains important security parameters. If you modify this file
|
|
||||||
# manually, Certbot will be unable to automatically provide future security
|
|
||||||
# updates. Instead, Certbot will print and log an error message with a path to
|
|
||||||
# the up-to-date file that you will need to refer to when manually updating
|
|
||||||
# this file. Contents are based on https://ssl-config.mozilla.org
|
|
||||||
|
|
||||||
ssl_session_cache shared:le_nginx_SSL:10m;
|
|
||||||
ssl_session_timeout 1440m;
|
|
||||||
ssl_session_tickets off;
|
|
||||||
|
|
||||||
ssl_protocols TLSv1.2 TLSv1.3;
|
|
||||||
ssl_prefer_server_ciphers off;
|
|
||||||
|
|
||||||
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
|
|
||||||
Loading…
Reference in a new issue