affine/nginx-profile-setup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

build on host net

Browse source 
Signed-off-by: Ava Hahn <a.hahn@f5.com>
This commit is contained in:
Ava Hahn 2025-08-18 03:59:32 +00:00
parent ff1bf042e7
commit ce3844ef4e
5 changed files with 108 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
compose.yaml
View file

@ -2,6 +2,7 @@ services:
kasvc-0: &kasvc
build:
context: kasvc
network: host
platforms:
- linux/x86_64
platform: linux/x86_64
@ -53,6 +54,7 @@ services:
kaproxy:
build:
context: kaproxy
network: host
platforms:
- linux/x86_64
platform: linux/x86_64
@ -68,6 +70,7 @@ services:
kaclient:
build:
context: kaclient
network: host
platforms:
- linux/x86_64
platform: linux/x86_64

4
kaclient/Dockerfile
View file

@ -1,6 +1,6 @@
FROM archlinux:latest
RUN pacman -Syyu --noconfirm
RUN pacman -S curl --noconfirm
RUN pacman -Sy curl --noconfirm
COPY run.sh /
CMD ["/run.sh"]

81
kaproxy/Dockerfile
View file

@ -12,6 +12,87 @@ RUN auto/configure \
RUN make
RUN make install
COPY nginx.conf /
WORKDIR /
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key0.pem \
-out cert0.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key1.pem \
-out cert1.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key2.pem \
-out cert2.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key3.pem \
-out cert3.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key4.pem \
-out cert4.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key5.pem \
-out cert5.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key6.pem \
-out cert6.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key7.pem \
-out cert7.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key8.pem \
-out cert8.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
RUN openssl req -x509 \
-newkey rsa:4096 \
-keyout key9.pem \
-out cert9.pem \
-sha256 -nodes \
-days 3650 \
-subj "/C=XX/ST=StateName/L=CityName/O=CompanyName/OU=CompanySectionName/CN=www.example.com"
COPY dhparam.pem /
COPY www.example.com.crt /

21
kaproxy/nginx.conf
View file

@ -15,44 +15,65 @@ http {
ssl_certificate /www.example.com.crt;
ssl_certificate_key /www.example.com.key;
access_log /tmp/access.log;
proxy_socket_keepalive on;
location /0 {
proxy_ssl_certificate /cert0.pem;
proxy_ssl_certificate_key /key0.pem;
proxy_pass http://kasvc-0:8080;
}
location /1 {
proxy_ssl_certificate /cert1.pem;
proxy_ssl_certificate_key /key1.pem;
proxy_pass http://kasvc-1:8080;
}
location /2 {
proxy_ssl_certificate /cert2.pem;
proxy_ssl_certificate_key /key2.pem;
proxy_pass http://kasvc-2:8080;
}
location /3 {
proxy_ssl_certificate /cert3.pem;
proxy_ssl_certificate_key /key3.pem;
proxy_pass http://kasvc-3:8080;
}
location /4 {
proxy_ssl_certificate /cert4.pem;
proxy_ssl_certificate_key /key4.pem;
proxy_pass http://kasvc-4:8080;
}
location /5 {
proxy_ssl_certificate /cert5.pem;
proxy_ssl_certificate_key /key5.pem;
proxy_pass http://kasvc-5:8080;
}
location /6 {
proxy_ssl_certificate /cert6.pem;
proxy_ssl_certificate_key /key6.pem;
proxy_pass http://kasvc-6:8080;
}
location /7 {
proxy_ssl_certificate /cert7.pem;
proxy_ssl_certificate_key /key7.pem;
proxy_pass http://kasvc-7:8080;
}
location /8 {
proxy_ssl_certificate /cert8.pem;
proxy_ssl_certificate_key /key8.pem;
proxy_pass http://kasvc-8:8080;
}
location /9 {
proxy_ssl_certificate /cert9.pem;
proxy_ssl_certificate_key /key9.pem;
proxy_pass http://kasvc-9:8080;
}
}

3
kasvc/Dockerfile
View file

@ -1,6 +1,5 @@
FROM archlinux:latest
RUN pacman -Syyu --noconfirm
RUN pacman -S glibc gcc-libs --noconfirm
RUN pacman -Sy glibc gcc-libs --noconfirm
EXPOSE 8080
COPY keepalive-svc /
CMD ["/keepalive-svc"]