* authenticate: set cookie secure as default. * authenticate: remove single flight provider. * authenticate/providers: Rename “ProviderData” to “IdentityProvider” * authenticate/providers: Fixed an issue where scopes were not being overwritten * proxy/authenticate : http client code removed. * proxy: standardized session variable names between services. * docs: change basic docker-config to be an “all-in-one” example with no nginx load. * docs: nginx balanced docker compose example with intra-ingress settings. * license: attribution for adaptation of goji’s middleware pattern. |
||
---|---|---|
.. | ||
from-source.md | ||
get-started.gif | ||
kubernetes-gke.png | ||
kubernetes.md | ||
readme.md |
Docker
Docker and docker-compose are tools for defining and running multi-container Docker applications. We've created an example docker-compose file that creates a minimal, but complete test environment for pomerium.
Prerequisites
- A configured identity provider
- Install docker
- Install docker-compose
Download
Copy and paste the contents of the provided example basic.docker-compose.yml and save it locally as docker-compose.yml
.
Configure
Edit the docker-compose.yml
to match your identity provider settings.
Place your domain's wild-card TLS certificate next to the compose file. If you don't have one handy, the included script generates one from LetsEncrypt.
Run
Docker-compose will automatically download the latest pomerium release as well as two example containers.
docker-compose up
Pomerium is configured to delegate access to two test apps helloworld and httpbin.
Navigate
Open a browser and navigate to hello.your.domain.com
or httpbin.your.domain.com
. You should see something like the following in your browser.
And in your terminal.