From a14985ed8a6b25cb53d1ef4e389185bad49d040c Mon Sep 17 00:00:00 2001 From: Asif Bacchus Date: Sat, 16 Nov 2019 15:36:13 -0700 Subject: [PATCH] add manually created network --- ab-nginx.params.template | 13 +++++++++++++ ab-nginx.sh | 18 +++++++++++++++++- 2 files changed, 30 insertions(+), 1 deletion(-) diff --git a/ab-nginx.params.template b/ab-nginx.params.template index 4e85b32..5e8a08f 100644 --- a/ab-nginx.params.template +++ b/ab-nginx.params.template @@ -8,6 +8,19 @@ ##### +### Network options +# If you want to specify a network to which this container should bind or one +# that should be created, then use this variable. If you don't know what this +# means or if you just want to use the default, leave this line/variable +# commented-out. +#NETWORK=nginx_network + +# If you want to specify a particular IP subnet for the network to be created +# as per the above variable, specify it here. Again, if you don't know what +# this means, just leave this commented-out. +#SUBNET='172.31.254.0/24' + + ### Timezone # This doesn't impact any functionality of the container, but it does make your # logs easier to understand if they report the correct local time, right? diff --git a/ab-nginx.sh b/ab-nginx.sh index 61ce45a..d95c9d0 100755 --- a/ab-nginx.sh +++ b/ab-nginx.sh @@ -13,8 +13,10 @@ yellow=$(tput setaf 3) ### parameter defaults -container_name="ab-nginx" shell=false +container_name="ab-nginx" +NETWORK='nginx_network' +SUBNET='172.31.254.0/24' HTTP_PORT=80 HTTPS_PORT=443 unset CONFIG_DIR @@ -168,6 +170,14 @@ while [ $# -gt 0 ]; do shift done +# create network if it doesn't already exist +docker network inspect ${NETWORK} > /dev/null 2>&1 || \ + docker network create \ + --attachable \ + --driver=bridge \ + --subnet=${SUBNET} \ + ${NETWORK} + # run without TLS if [ -z "$SSL_CERT" ]; then @@ -178,6 +188,7 @@ if [ -z "$SSL_CERT" ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -p ${HTTP_PORT}:80 \ docker.asifbacchus.app/nginx/ab-nginx:latest /bin/sh else @@ -187,6 +198,7 @@ if [ -z "$SSL_CERT" ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -p ${HTTP_PORT}:80 \ --restart unless-stopped \ docker.asifbacchus.app/nginx/ab-nginx:latest @@ -200,6 +212,7 @@ elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = FALSE ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -v "$SSL_CERT":/certs/fullchain.pem:ro \ -v "$SSL_KEY":/certs/privkey.pem:ro \ -v "$SSL_CHAIN":/certs/chain.pem:ro \ @@ -213,6 +226,7 @@ elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = FALSE ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -v "$SSL_CERT":/certs/fullchain.pem:ro \ -v "$SSL_KEY":/certs/privkey.pem:ro \ -v "$SSL_CHAIN":/certs/chain.pem:ro \ @@ -230,6 +244,7 @@ elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = TRUE ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -v "$SSL_CERT":/certs/fullchain.pem:ro \ -v "$SSL_KEY":/certs/privkey.pem:ro \ -v "$SSL_CHAIN":/certs/chain.pem:ro \ @@ -242,6 +257,7 @@ elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = TRUE ]; then --env-file ab-nginx.params \ -e SERVER_NAMES="$HOSTNAMES" \ $vmount \ + --network=${NETWORK} \ -v "$SSL_CERT":/certs/fullchain.pem:ro \ -v "$SSL_KEY":/certs/privkey.pem:ro \ -v "$SSL_CHAIN":/certs/chain.pem:ro \