Dockerize elasticsearch-hq

jeremos · Oct 7, 2017 · fefea1a · fefea1a
1 parent eb117d4
commit fefea1a
Show file tree

Hide file tree

Showing 3 changed files with 145 additions and 0 deletions.
diff --git a/.dockerignore b/.dockerignore
@@ -0,0 +1,27 @@
+.dockerignore
+.git
+.gitignore
+0compose/
+venv/
+.venv/
+.idea/
+.vscode/
+.classpath
+.project
+.settings/
+.idea/
+*.iml
+*.iws
+.DS_Store
+log/
+target/
+tmp
+node_modules
+dist
+npm-debug.log
+bower_components
+*.swp
+
+# Don't need the files
+tpl/
+js/lib/ace/src-min-noconflict/
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,12 @@
+FROM nginx:1.13-alpine
+
+RUN apk add --no-cache openssl
+
+WORKDIR /app
+
+COPY docker-entrypoint.sh /
+COPY . /app
+
+EXPOSE 80
+
+CMD ["/docker-entrypoint.sh"]
diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
@@ -0,0 +1,106 @@
+#!/bin/sh
+set -e
+
+[ -n "$HOST" ] || ( echo "HOST required - You must supply the FQDN of the public host"; false )
+
+SCHEME=${SCHEME:-http}
+USERNAME=${USERNAME:-elasticsearch}
+PASSWORD=${PASSWORD:-elasticsearch@123}
+ES_HOST=${ES_HOST:-172.17.0.1}
+ES_PORT=${ES_PORT:-9200}
+PORT=${PORT:-80}
+
+echo "$USERNAME:$(openssl passwd -crypt $PASSWORD 2>/dev/null)" > /etc/nginx/.htpasswd
+
+CONFDIR=/etc/nginx/conf
+[ -d /etc/nginx/conf.d ] && CONFDIR=/etc/nginx/conf.d
+
+cat <<EOF > $CONFDIR/default.conf
+upstream elasticsearch {
+  server $ES_HOST:$ES_PORT;
+  keepalive 15;
+}
+server {
+  listen                *:$PORT ;
+  server_name           $HOST;
+  access_log            /dev/stdout;
+  error_log             /dev/stderr;
+EOF
+
+if [ "${SCHEME}" == "https" ]; then
+
+cat <<EOF >> $CONFDIR/default.conf
+  # Enforce SSL
+  if (\$http_x_forwarded_proto != '$SCHEME') {
+    rewrite ^ $SCHEME://\$host$request_uri? permanent;
+  }
+EOF
+
+fi
+
+cat <<EOF >> $CONFDIR/default.conf
+  auth_basic "Protected ElasticSearchHQ";
+  auth_basic_user_file /etc/nginx/.htpasswd;
+  proxy_read_timeout 90;
+  proxy_http_version 1.1;
+  proxy_set_header Connection "Keep-Alive";
+  proxy_set_header Proxy-Connection "Keep-Alive";
+
+  proxy_set_header X-Real-IP \$proxy_add_x_forwarded_for;
+  proxy_set_header X-ELB-IP \$remote_addr;
+  proxy_set_header X-ELB-Forwarded-For \$proxy_add_x_forwarded_for;
+  proxy_set_header Host \$http_host;
+  proxy_set_header Referer $HOST;
+
+  # For CORS Ajax
+  proxy_pass_header Access-Control-Allow-Origin;
+  proxy_pass_header Access-Control-Allow-Methods;
+  proxy_hide_header Access-Control-Allow-Headers;
+  add_header Access-Control-Allow-Headers 'X-Requested-With, Content-Type';
+  add_header Access-Control-Allow-Credentials true;
+
+  location = / {
+    if (\$request_method = OPTIONS ) {
+      add_header Access-Control-Allow-Origin "$SCHEME://$HOST";
+      add_header Access-Control-Allow-Methods "GET, OPTIONS";
+      add_header Access-Control-Allow-Headers "Authorization";
+      add_header Access-Control-Allow-Credentials "true";
+      add_header Content-Length 0;
+      add_header Content-Type text/plain;
+      return 200;
+    }
+
+    proxy_pass http://elasticsearch;
+
+    expires max;
+    access_log on;
+  }
+  location / {
+    root /app;
+
+    if (\$request_method = OPTIONS ) {
+      add_header Access-Control-Allow-Origin "$SCHEME://$HOST";
+      add_header Access-Control-Allow-Methods "GET, OPTIONS";
+      add_header Access-Control-Allow-Headers "Authorization";
+      add_header Access-Control-Allow-Credentials "true";
+      add_header Content-Length 0;
+      add_header Content-Type text/plain;
+      return 200;
+    }
+
+    index index.html;
+
+    try_files \$uri \$uri/ @proxypass;
+
+    expires max;
+    access_log on;
+  }
+
+  location @proxypass {
+    proxy_pass http://elasticsearch;
+  }
+}
+EOF
+
+# Starting nginx
+exec nginx -g "daemon off;"