mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 03:46:29 +02:00
c886b924e7
* authenticate: set cookie secure as default. * authenticate: remove single flight provider. * authenticate/providers: Rename “ProviderData” to “IdentityProvider” * authenticate/providers: Fixed an issue where scopes were not being overwritten * proxy/authenticate : http client code removed. * proxy: standardized session variable names between services. * docs: change basic docker-config to be an “all-in-one” example with no nginx load. * docs: nginx balanced docker compose example with intra-ingress settings. * license: attribution for adaptation of goji’s middleware pattern.
48 lines
1.7 KiB
Markdown
48 lines
1.7 KiB
Markdown
# Docker
|
|
|
|
Docker and docker-compose are tools for defining and running multi-container Docker applications. We've created an example docker-compose file that creates a minimal, but complete test environment for pomerium.
|
|
|
|
## Prerequisites
|
|
|
|
- A configured [identity provider]
|
|
- Install [docker]
|
|
- Install [docker-compose]
|
|
|
|
## Download
|
|
|
|
Copy and paste the contents of the provided example [basic.docker-compose.yml] and save it locally as `docker-compose.yml`.
|
|
|
|
## Configure
|
|
|
|
Edit the `docker-compose.yml` to match your [identity provider] settings.
|
|
|
|
Place your domain's wild-card TLS certificate next to the compose file. If you don't have one handy, the included [script] generates one from [LetsEncrypt].
|
|
|
|
## Run
|
|
|
|
Docker-compose will automatically download the latest pomerium release as well as two example containers.
|
|
|
|
```bash
|
|
docker-compose up
|
|
```
|
|
|
|
Pomerium is configured to delegate access to two test apps [helloworld] and [httpbin].
|
|
|
|
## Navigate
|
|
|
|
Open a browser and navigate to `hello.your.domain.com` or `httpbin.your.domain.com`. You should see something like the following in your browser.
|
|
|
|
|
|
|
|
And in your terminal.
|
|
|
|
[](https://asciinema.org/a/tfbSWkUZgMRxHAQDqmcjjNwUg)
|
|
|
|
[basic.docker-compose.yml]: ../docs/examples.html#basic-docker-compose-yml
|
|
[docker]: https://docs.docker.com/install/
|
|
[docker-compose]: https://docs.docker.com/compose/install/
|
|
[helloworld]: https://hub.docker.com/r/tutum/hello-world
|
|
[httpbin]: https://httpbin.org/
|
|
[identity provider]: ../docs/identity-providers.md
|
|
[letsencrypt]: https://letsencrypt.org/
|
|
[script]: https://github.com/pomerium/pomerium/blob/master/scripts/generate_wildcard_cert.sh
|