WIP: optional SSH connection

[ci skip]

.env.sample

@@ -5,12 +5,19 @@ DOMAIN=wordpress.example.com
 #EXTRA_DOMAINS=', `www.wordpress.example.com`'
 LETS_ENCRYPT_ENV=production
 
+# Necessary for optional features, leave this alone:
+COMPOSE_FILE="compose.yml"
+
 ## Additional extensions
 #PHP_EXTENSIONS="calendar"
 
 SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_DB_PASSWORD_VERSION=v1
 
+# SSH access
+#COMPOSE_FILE="$COMPOSE_FILE:compose.ssh.yml"
+#SSH_PUBLIC_KEY=<your pubkey here>
+
 # Multisite
 #WORDPRESS_CONFIG_EXTRA="\
 #	define('WP_CACHE', false);\
@@ -30,12 +37,12 @@ SECRET_DB_PASSWORD_VERSION=v1
 #	define('COOKIE_DOMAIN', \$_SERVER['HTTP_HOST']);"
 
 # Local SMTP relay
-#COMPOSE_FILE="compose.yml:compose.mailrelay.yml"
+#COMPOSE_FILE="$COMPOSE_FILE:compose.mailrelay.yml"
 #SMTP_HOST="postfix_relay_app"
 #MAIL_FROM="wordpress@example.com"
 
 # Remote SMTP relay
-#COMPOSE_FILE="compose.yml:compose.mailrelay.yml:compose.smtp.yml"
+#COMPOSE_FILE="$COMPOSE_FILE:compose.smtp.yml"
 #SMTP_HOST="mail.example.com"
 #MAIL_FROM="wordpress@example.com"
 #SMTP_PORT=587

README.md

@@ -6,14 +6,14 @@ Coöp Cloud + [Wordpress](https://wordpress.org) = 🥳
 
 <!-- metadata -->
 
-- **Category**: Apps
+* **Category**: Apps
-- **Status**: ❶💚
+* **Status**: 3, stable
-- **Image**: [`wordpress`](https://hub.docker.com/_/wordpress), ❶💚, upstream
+* **Image**: [`wordpress`](https://hub.docker.com/_/wordpress), 4, upstream
-- **Healthcheck**: Yes
+* **Healthcheck**: Yes
-- **Backups**: Yes
+* **Backups**: Yes
-- **Email**: ❶💚
+* **Email**: 3
-- **Tests**: ❷💛
+* **Tests**: 2
-- **SSO**: No
+* **SSO**: No
 
 <!-- endmetadata -->
 
@@ -59,8 +59,8 @@ _(Only tested using subdomains)_
 
 There is a local or remote SMTP relay configuration available.
 
-- **local**: `COMPOSE_FILE=compose.yml:compose.mailrelay.yml`
+* **local**: `COMPOSE_FILE=compose.yml:compose.mailrelay.yml`
-- **remote**: `COMPOSE_FILE=compose.yml:compose.mailrelay.yml:compose.smtp.yml`
+* **remote**: `COMPOSE_FILE=compose.yml:compose.mailrelay.yml:compose.smtp.yml`
 
 Below are the instructions for the local relay.
 

compose.ssh.yml

@@ -0,0 +1,27 @@
+---
+version: "3.8"
+
+services:
+  ssh:
+    image: lscr.io/linuxserver/openssh-server
+    environment:
+      - PUID=33
+      - PGID=33
+      - PUBLIC_KEY=${SSH_PUBLIC_KEY}
+      - USER_NAME=wordpress
+      - PASSWORD_ACCESS=false
+    networks:
+      - proxy
+    deploy:
+      update_config:
+        failure_action: rollback
+        order: start-first
+      labels:
+        - "traefik.enable=true"
+        - "traefik.tcp.routers.${STACK_NAME}-ssh.rule=HostSNI(`*`)"
+        - "traefik.tcp.routers.${STACK_NAME}-ssh.entrypoints=gitea-ssh"
+        - "traefik.tcp.services.${STACK_NAME}-ssh.loadbalancer.server.port=2222"
+
+networks:
+  proxy:
+    external: true