forked from coop-cloud/traefik
Jade Ambrose
7e688c9094
# Support P2P communication between P2Panda Apps Apps built with the set of [P2Panda](https://p2panda.org/) libraries perform P2P communication over two UDP ports. The default ports for these are 2022 and 2023. There aren't really a lot (any?) P2Panda web apps out there, most are desktop or mobile apps. So, this change is being specifically request by the [LoRes Tech](https://lores.tech/) project in order to support our [LoRes Node](https://github.com/local-resilience-tech/lores-node/) app. We have a recipe drafted for this [here](https://codeberg.org/lores/lores-node-coop-cloud-recipe) and we will push that to the catalogue once this change is in. It seems better to make this kiwix change as general as possible, which is why we called the flag `P2PANDA_ENABLED` rather than `LORES_NODE_ENABLED`. In practice if there was a larger ecosystem of such apps, we'd probably need to make the actual port numbers configurable. Reviewed-on: coop-cloud/traefik#70 Reviewed-by: p4u1 <p4u1@noreply.git.coopcloud.tech> Co-authored-by: Jade Ambrose <jade@noreply.git.coopcloud.tech> Co-committed-by: Jade Ambrose <jade@noreply.git.coopcloud.tech>
Traefik
- Maintainer: @p4u1
- Status:
stable - Category: Utilities
- Features: ?
- Image:
traefik, 4, upstream - Healthcheck: Yes
- Backups: No
- Email: N/A
- Tests: 2
- SSO: ? (Keycloak)
Basic usage
- Set up Docker Swarm and
abra abra app new traefikabra app config YOURAPPDOMAIN- be sure to changeDOMAINto something that resolves to your Docker swarm boxabra app deploy YOURAPPDOMAIN
Configuring basic auth
- Create the usersfile locally:
htpasswd -c usersfile <username> - Uncomment the Basic Auth section in your .env file
- Insert the secret: `abra app secret insert usersfile v1 -f usersfile
- Redploy your app:
abra app deploy -f <domain>
Configuring wildcard SSL using DNS
Automatic certificate generation will Just Work™ for most recipes which use a fixed
number of subdomains. For some recipes which need to work across arbitrary
subdomains, like
federatedwiki and
go-ssb-room, you'll
need to give Traefik access to your DNS provider so that it can carry out
Letsencrypt DNS challenges.
- Use Gandi or OVH for DNS 🤡 (support for other providers can be easily added,
see the
legodocs. - Run
abra app config YOURAPPDOMAIN - Uncomment e.g.
ENABLE_GANDIand the relatedSECRET_.._VERSIONline, e.g.SECRET_GANDIV5_API_KEY_VERSION - Generate an API key for your provider
- Run
abra app secret insert YOURAPPDOMAIN SECRETNAME v1 SECRETVALUE, whereSECRETNAMEis from the compose file (e.g.compose.gandi-api-key.yml) e.g.gandiv5_api_keyandSECRETVALUEis the API key.- For Gandi, you can use either the deprecated API Key or a GandiV5 Personal Access Token, in which case use compose.gandi-personal-access-token.yml.
- Redeploy Traefik, using e.g.
abra app deploy YOURAPPDOMAIN -f