TAI/TA-Deployment-Broker
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docker update

Browse Source
This commit is contained in:
David Schroeder
2026-07-26 14:29:23 -05:00
parent 4511d3a0a3
commit 8d17c83f35
5 changed files with 19 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/deployment.md
+12 -11
View File
@@ -11,17 +11,17 @@ It consists of four containers:
- Nginx, terminating TLS for the broker and Gitea
- Certbot, run on demand for certificate issuance and renewal
Only the configured Nginx HTTP/HTTPS ports and Gitea SSH port are published.
They default to 8680, 8643, and 2222. Inside Docker, Nginx continues to listen
on ports 80 and 443. The broker and Gitea HTTP services are reachable only on
the private `tapm-edge` Docker network.
The configured Nginx HTTP/HTTPS ports and Gitea HTTP port are published. They
default to 8680, 8643, and 3000. Inside Docker, Nginx continues to listen on
ports 80 and 443 and Gitea listens on port 3000. Gitea SSH is disabled.
## 1. VM and network
Install Docker Engine with Compose v2. Permit the selected HTTP, HTTPS, and SSH
ports and forward public TCP 80, 443, and the selected SSH port from the
datacenter edge to them. Create public DNS A/AAAA records for both application
names before requesting the certificate.
Install Docker Engine with Compose v2. Permit the selected HTTP and HTTPS ports
and forward public TCP 80 and 443 from the datacenter edge to them. The
`GITEA_HTTP_PORT` binding is intended for direct local or management access and
should be firewalled from untrusted networks. Create public DNS A/AAAA records
for both application names before requesting the certificate.
Public port 80 must reach the container's port 80 for HTTP-01 certificate
renewal. For example, if `HTTP_PORT=8080`, the edge must forward public port 80
@@ -41,8 +41,9 @@ chmod 600 .env
Set `BROKER_DOMAIN`, `GITEA_DOMAIN`, and `LETSENCRYPT_EMAIL` first. `HTTP_PORT`
and `HTTPS_PORT` control the VM-side Docker bindings and default to 8680 and
8643. The datacenter edge should therefore forward public ports 80 and 443 to
VM ports 8680 and 8643. Replace all example domains in the TAPM variables.
Generate the cookie secret with:
VM ports 8680 and 8643. `GITEA_HTTP_PORT` controls the host binding for Gitea's
port 3000 and defaults to 3000. Replace all example domains in the TAPM
variables. Generate the cookie secret with:
```sh
openssl rand -base64 48
@@ -129,7 +130,7 @@ Gitea and mirror all refs:
```sh
git clone --mirror OLD-REPOSITORY-URL
cd REPOSITORY.git
git push --mirror ssh://git@GITEA_DOMAIN:2222/TAI/REPOSITORY.git
git push --mirror https://GITEA_DOMAIN/TAI/REPOSITORY.git
```
Update developer remotes, CI credentials, submodules, documentation, and the Go