add version tagging to the web and konnect image (#78)

2026-08-11 16:32:59 +00:00 · 2019-01-11 08:06:21 +01:00
parent e59d26986b
commit a630007059
7 changed files with 39 additions and 11 deletions
@@ -0,0 +1,8 @@
+ARG CODE_VERSION=0.4.2
+FROM kopano/kwebd:${CODE_VERSION}
+ARG CODE_VERSION
+ENV CODE_VERSION="${CODE_VERSION}"
+
+COPY wrapper.sh /usr/local/bin
+COPY kweb.cfg /etc/kweb.cfg
+
@@ -0,0 +1,132 @@
+:8080 {
+    redir / https://{host}{uri}
+}
+
+*, :8443 {
+    log stdout
+    errors stdout
+
+    gzip
+    header / Server kweb
+
+    tls {%EMAIL%}
+
+    limits {
+        header 1MB
+        body   50MB
+    }
+
+    redir 302 {
+        if {path} is /
+        / /webapp/
+    }
+
+    # Config
+    configjson /api/config/v1/kopano/ config/kopano
+
+    # Konnect
+    proxy /upstreams/konnect/ {
+        without /upstreams/konnect/
+        upstream kopano_konnect:8777
+        policy least_conn
+        health_check /health-check
+        fail_timeout 10s
+        try_duration 30s
+        keepalive 100
+        transparent
+        header_downstream Feature-Policy "midi 'none'"
+        header_downstream X-Frame-Options "sameorigin"
+    }
+    ratelimit * 100 200 minute {
+        /upstreams/konnect/v1/
+        /signin/v1/identifier/_/
+        whitelist 127.0.0.1/8
+    }
+    rewrite /.well-known/openid-configuration {
+        to /upstreams/konnect/{path}
+    }
+    rewrite /konnect/v1/ {
+        to /upstreams/konnect/{path}
+    }
+    rewrite /signin/v1/ {
+        to /upstreams/konnect/{path}
+    }
+    redir /signin /signin/v1/identifier
+
+    # Kapi
+    proxy /upstreams/kapi/ {
+        without /upstreams/kapi/
+        upstream kopano_kapi:8039
+        policy least_conn
+        health_check /health-check
+        fail_timeout 10s
+        try_duration 30s
+        keepalive 100
+        transparent
+        websocket
+    }
+    ratelimit * 100 200 minute {
+        /upstreams/kapi/api/
+        whitelist 127.0.0.1/8
+    }
+    rewrite /api/gc/v1/ {
+        to /upstreams/kapi/{path}
+    }
+    rewrite /api/pubs/v1/ {
+        to /upstreams/kapi/{path}
+    }
+    rewrite /api/kvs/v1/ {
+        to /upstreams/kapi/{path}
+    }
+
+    # playground for oidc
+    proxy /oidc-playground/ http://kopano_playground:8888/ {
+        fail_timeout 10s
+        try_duration 30s
+        transparent
+        keepalive 100
+    }
+    folderish /oidc-playground
+
+    # playground for Kapi
+    proxy /kapi-playground/ http://kopano_playground:8888/ {
+        fail_timeout 10s
+        try_duration 30s
+        transparent
+        keepalive 100
+    }
+    folderish /kapi-playground
+
+    proxy /webapp/ kopano_webapp:80 {
+        fail_timeout 10s
+        try_duration 30s
+        transparent
+        keepalive 100
+    }
+    folderish /webapp
+
+    proxy /Microsoft-Server-ActiveSync kopano_zpush:80 {
+        transparent
+        keepalive 0
+        timeout 3540s
+    }
+
+    proxy /AutoDiscover/AutoDiscover.xml kopano_zpush:80 {
+        transparent
+        keepalive 0
+        fail_timeout 10s
+        try_duration 30s
+    }
+
+    proxy /ldap-admin/ ldap-admin:80 {
+        without /ldap-admin
+        transparent
+    }
+    redir /ldap-admin /ldap-admin/
+
+    proxy /password-reset/ password-self-service:80 {
+        without /password-reset
+        transparent
+    }
+    redir /password-reset /password-reset/
+}
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+set -e
+
+if [ "$EMAIL" = "self_signed" ]; then
+	# do not use the '-host' option if using a self signed cert
+	exec kwebd caddy -conf /etc/kweb.cfg -agree
+else
+	exec kwebd caddy -conf /etc/kweb.cfg -agree -host "$FQDN"
+fi