Andreas Piening
05/25/2022, 3:43 PMfleetctl preview
I want to install fleet
on a public node with docker-compose
using traefic
to provide the HTTPs
cert via letsencrypt
. Is there any example / guide available which I can use as a template?Benjamin Edwards
05/25/2022, 3:49 PMKathy Satterlee
05/25/2022, 3:49 PMAndreas Piening
05/25/2022, 3:50 PMHTTPs
portion if I may ask?HTTPs
for the HTTP
service port should be easy I guess, but I found something related to the SSL
certificate that is needed to be exported so that the clients can use it to check the authentication against the server. Maybe I completely misunderstood this.Kathy Satterlee
05/25/2022, 3:57 PMAndreas Piening
05/25/2022, 4:02 PMKathy Satterlee
05/25/2022, 4:02 PMAndreas Piening
05/25/2022, 4:03 PMtraefic
instance with working SSL
via letsenvcrypt
within under 15 minutes.Kathy Satterlee
05/25/2022, 4:03 PMAndreas Piening
05/25/2022, 4:05 PMtraefik
I use a docker-compose
project dedicated to to traefik
. I then can have multiple docker-compose
projects and expose them with just a few labels. You can use this as an example for a HTTP based service based on a simple docker
container: https://github.com/cbirkenbeul/docker-homelab/blob/master/compose-files/applications/yourls/docker-compose.yamltraefik
is the labels
section and the networks
section, because the container that needs to be exposed must be attached to the same network that traefik
uses. In this case it is called traefik_proxy
.Kathy Satterlee
05/25/2022, 4:22 PMAndreas Piening
05/25/2022, 4:24 PMKathy Satterlee
05/25/2022, 4:24 PMAndreas Piening
05/25/2022, 4:50 PMdocker-com config
says: ERROR: Service ‘fleet’ depends on service ‘certs’ which is undefined.certs
under depends_on
for the fleet
container. But the service is not defined.Kathy Satterlee
05/25/2022, 4:55 PMAndreas Piening
05/25/2022, 5:00 PMfleet
needs to be configured to serve HTTP
while traefic
is doing the HTTPS
encryption.FLEET_SERVER_CERT
from the env.Benjamin Edwards
05/25/2022, 6:16 PMFLEET_SERVER_TLS=false
Andreas Piening
05/25/2022, 6:22 PMBenjamin Edwards
05/25/2022, 6:25 PMAndreas Piening
05/25/2022, 6:26 PMdnsChallenge
on another system where I need wildcard-DNS and it works fine with my DNS-Provider (hetzner), but many DNS APIs are supported.Benjamin Edwards
05/25/2022, 6:26 PMAndreas Piening
05/25/2022, 6:26 PMstorage
parameter in the traefik.toml
to a acme.json
file.Benjamin Edwards
05/25/2022, 6:27 PMAndreas Piening
05/25/2022, 6:27 PM- ./config:/etc/traefik
Benjamin Edwards
05/25/2022, 6:29 PMAndreas Piening
05/25/2022, 6:29 PMBenjamin Edwards
05/25/2022, 6:30 PMAndreas Piening
05/25/2022, 6:31 PMBenjamin Edwards
05/25/2022, 6:31 PMAndreas Piening
05/25/2022, 6:32 PM.deb
package with the command provided by the fleet
web-ui and installed it on another system and it worked right away.docker-compose
example for hours and now it is working perfectly fine. Thank you very much @Kathy SatterleeKathy Satterlee
05/25/2022, 7:59 PMAndreas Piening
05/25/2022, 8:02 PMdefault.env
files.
FLEET_MYSQL_ADDRESS="mysql:3306" => FLEET_MYSQL_ADDRESS=mysql:3306
Kathy Satterlee
05/25/2022, 8:03 PMAndreas Piening
05/25/2022, 8:08 PMdocker-compose up
I get an error because the variable FLEET_OSQUERY_LABEL_UPDATE_INTERVAL=\“FLEET_SOMETHING\” was not a valid value. After removing the quotes all was fine.Kathy Satterlee
05/25/2022, 8:17 PM