mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-03 12:26:03 +02:00
bcecee5ee3
- Update PR template to use Go language conventions. - Moved healthcheck middleware to hijack a request before logging. - Rewrote the quickstart guides to follow a similar pattern. - Added an overview blurb on pomerium and its goals. - Add an "example config" section to docs.
48 lines
1.7 KiB
Markdown
48 lines
1.7 KiB
Markdown
# Docker
|
|
|
|
## Prerequisites
|
|
|
|
- A configured [identity provider]
|
|
|
|
## Install
|
|
|
|
Install [docker] and [docker-compose]. Docker-compose is a tool for defining and running multi-container Docker applications. We've created an example docker-compose file that creates a minimal, but complete test environnement for pomerium.
|
|
|
|
## Download
|
|
|
|
Copy and paste the contents of the provided example [basic.docker-compose.yml] and save it locally as `docker-compose.yml`.
|
|
|
|
## Configure
|
|
|
|
Edit the [docker-compose.yml] to match your [identity provider] settings.
|
|
|
|
Place your domain's wild-card TLS certificate next to the compose file. If you don't have one handy, the included [script] generates one from [LetsEncrypt].
|
|
|
|
## Run
|
|
|
|
You can then download the latest pomerium release of pomerium in docker form along some example containers and an nginx load balancer all in one step.
|
|
|
|
```bash
|
|
docker-compose up
|
|
```
|
|
|
|
Pomerium is configured to delegate access to two test apps [helloworld] and [httpbin].
|
|
|
|
## Navigate
|
|
|
|
Open a browser and navigate to `hello.your.domain.com` or `httpbin.your.domain.com`. You should see something like the following in your browser.
|
|
|
|
|
|
|
|
And in your terminal.
|
|
|
|
[](https://asciinema.org/a/tfbSWkUZgMRxHAQDqmcjjNwUg)
|
|
|
|
[basic.docker-compose.yml]: ../docs/examples.html#basic-docker-compose-yml
|
|
[docker]: https://docs.docker.com/install/
|
|
[docker-compose]: (https://docs.docker.com/compose/install/)
|
|
[helloworld]: https://hub.docker.com/r/tutum/hello-world
|
|
[httpbin]: https://httpbin.org/
|
|
[identity provider]: ../docs/identity-providers.md
|
|
[letsencrypt]: https://letsencrypt.org/
|
|
[script]: https://github.com/pomerium/pomerium/blob/master/scripts/generate_wildcard_cert.sh
|