From ac27973330ce8613d835a6d01d12229da69d777d Mon Sep 17 00:00:00 2001 From: rorapp Date: Mon, 17 Feb 2025 18:13:54 +0100 Subject: [PATCH] environment variables all the different production setups ( not yet adapted, sensitive info as well) --- env/production/.env.administration | 0 env/production/.env.backend | 1 + env/production/.env.database | 7 +++++++ env/production/.env.develop | 1 + env/production/.env.frontend | 0 env/production/.env.portainer | 3 +++ env/production/.env.proxy | 32 ++++++++++++++++++++++++++++++ env/production/.env.tools | 0 env/production/.env.website | 0 9 files changed, 44 insertions(+) create mode 100644 env/production/.env.administration create mode 100644 env/production/.env.backend create mode 100644 env/production/.env.database create mode 100644 env/production/.env.develop create mode 100644 env/production/.env.frontend create mode 100644 env/production/.env.portainer create mode 100644 env/production/.env.proxy create mode 100644 env/production/.env.tools create mode 100644 env/production/.env.website diff --git a/env/production/.env.administration b/env/production/.env.administration new file mode 100644 index 0000000..e69de29 diff --git a/env/production/.env.backend b/env/production/.env.backend new file mode 100644 index 0000000..da3fa1c --- /dev/null +++ b/env/production/.env.backend @@ -0,0 +1 @@ +${REDIS_PASSWORD} \ No newline at end of file diff --git a/env/production/.env.database b/env/production/.env.database new file mode 100644 index 0000000..2544ad9 --- /dev/null +++ b/env/production/.env.database @@ -0,0 +1,7 @@ +# ---------------------------------- +# Datenbank (MariaDB) +# ---------------------------------- +MARIADB_USER=${INFRASTRUCTURE_LABEL}_${ENVIRONMENT} +MARIADB_DATABASE=${INFRASTRUCTURE_LABEL}_${ENVIRONMENT} +MARIADB_PASSWORD=1stronges-mindboostdb-passwort +MARIADB_ROOT_PASSWORD=1stronges-passwort-fuer-diedb diff --git a/env/production/.env.develop b/env/production/.env.develop new file mode 100644 index 0000000..d0483c8 --- /dev/null +++ b/env/production/.env.develop @@ -0,0 +1 @@ +ADMINER_PORT=8000 \ No newline at end of file diff --git a/env/production/.env.frontend b/env/production/.env.frontend new file mode 100644 index 0000000..e69de29 diff --git a/env/production/.env.portainer b/env/production/.env.portainer new file mode 100644 index 0000000..82f3f7d --- /dev/null +++ b/env/production/.env.portainer @@ -0,0 +1,3 @@ +PORTAINER_IMAGE=portainer/portainer-ce:latest +PORTAINER_DATA_PATH=/opt/containers/portainer/data +PORTAINER_DOMAIN=portainer.yourdomain.com \ No newline at end of file diff --git a/env/production/.env.proxy b/env/production/.env.proxy new file mode 100644 index 0000000..829151c --- /dev/null +++ b/env/production/.env.proxy @@ -0,0 +1,32 @@ +TRAEFIK_HTTPS_REDIRECT_MIDDLEWARE=${INFRASTRUCTURE_LABEL}-https-redirect +TRAEFIK_BASIC_AUTH_MIDDLEWARE=${INFRASTRUCTURE_LABEL}-basic-auth +TRAEFIK_BASIC_AUTH_USERS=${ADMIN_USER}:${ADMIN_PASSWORD_HASH} + +# Service Crowdsec +SERVICES_CROWDSEC_CONTAINER_NAME=crowdsec +SERVICES_CROWDSEC_HOSTNAME=crowdsec +SERVICES_CROWDSEC_IMAGE=crowdsecurity/crowdsec +SERVICES_CROWDSEC_IMAGE_VERSION=latest +SERVICES_CROWDSEC_NETWORKS_CROWDSEC_IPV4=172.31.254.254 + +# Service Traefik +SERVICES_TRAEFIK_CONTAINER_NAME=${INFRASTRUCTURE_LABEL}-traefik +SERVICES_TRAEFIK_HOSTNAME=${INFRASTRUCTURE_LABEL}-traefik +SERVICES_TRAEFIK_IMAGE=traefik +SERVICES_TRAEFIK_IMAGE_VERSION=2.11 +SERVICES_TRAEFIK_LABELS_TRAEFIK_HOST=`traefik.haslach2025.de` +SERVICES_TRAEFIK_NETWORKS_CROWDSEC_IPV4=172.31.254.253 +SERVICES_TRAEFIK_NETWORKS_PROXY_IPV4=172.30.255.254 + +# Service Traefik Crowdsec Bouncer +SERVICES_TRAEFIK_CROWDSEC_BOUNCER_CONTAINER_NAME=traefik_crowdsec_bouncer +SERVICES_TRAEFIK_CROWDSEC_BOUNCER_HOSTNAME=traefik-crowdsec-bouncer +SERVICES_TRAEFIK_CROWDSEC_BOUNCER_IMAGE=fbonalair/traefik-crowdsec-bouncer +SERVICES_TRAEFIK_CROWDSEC_BOUNCER_IMAGE_VERSION=latest +SERVICES_TRAEFIK_CROWDSEC_BOUNCER_NETWORKS_CROWDSEC_IPV4=172.31.254.252 + +# Netzwerkeinstellungen +NETWORKS_PROXY_NAME=proxy +NETWORKS_PROXY_SUBNET_IPV4=172.30.0.0/16 +NETWORKS_CROWDSEC_NAME=crowdsec +NETWORKS_CROWDSEC_SUBNET_IPV4=172.31.0.0/16 diff --git a/env/production/.env.tools b/env/production/.env.tools new file mode 100644 index 0000000..e69de29 diff --git a/env/production/.env.website b/env/production/.env.website new file mode 100644 index 0000000..e69de29