mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 11:56:02 +02:00
57 lines
1.7 KiB
Markdown
57 lines
1.7 KiB
Markdown
---
|
|
title: Docker
|
|
lang: en-US
|
|
meta:
|
|
- name: keywords
|
|
content: pomerium identity-access-proxy oidc docker reverse-proxy containers
|
|
---
|
|
|
|
# Pomerium using Docker
|
|
|
|
[Docker] is a straightforward way to start using Pomerium. In the following quick-start, we'll create a minimal but complete environment for running Pomerium with containers.
|
|
|
|
## Prerequisites
|
|
|
|
- A configured [identity provider]
|
|
- [Docker] and [docker-compose]
|
|
- A [wild-card TLS certificate]
|
|
|
|
## Configure
|
|
|
|
### Docker-compose
|
|
|
|
Download the following `docker-compose.yml` file and modify it to:
|
|
|
|
- generate new secrets
|
|
- mount your [wild-card TLS certificate]
|
|
- mount Pomerium's `config.yaml` [configuration file]
|
|
|
|
<<< @/docs/docs/examples/docker/basic.docker-compose.yml
|
|
|
|
### Configuration file
|
|
|
|
Create a [configuration file] (`config.yaml`) for defining Pomerium's configuration settings, routes, and access-policies. Consider the following example:
|
|
|
|
<<< @/docs/docs/examples/config/config.minimal.yaml
|
|
|
|
Ensure the `docker-compose.yml` contains the correct path to your `config.yaml`.
|
|
|
|
## Run
|
|
|
|
Finally, simply run docker compose.
|
|
|
|
```bash
|
|
docker-compose up
|
|
```
|
|
|
|
Docker will automatically download the required [container images] for Pomerium and [httpbin]. Then, Pomerium will run with the configuration details set in the previous steps.
|
|
|
|
You should now be able access to the routes (e.g. `https://httpbin.corp.yourdomain.example`) as specified in your policy file.
|
|
|
|
[configuration file]: ../reference/readme.md
|
|
[container images]: https://hub.docker.com/r/pomerium/pomerium
|
|
[docker]: https://docs.docker.com/install/
|
|
[docker-compose]: https://docs.docker.com/compose/install/
|
|
[httpbin]: https://httpbin.org/
|
|
[identity provider]: ../docs/identity-providers.md
|
|
[wild-card tls certificate]: ../docs/certificates.md
|