d514ef44cb
* implement new env variable to disable all automatic actions fixes https://github.com/zokradonh/kopano-docker/issues/360 * wrap the remaining services in checks if autoconfigure/disable_checks is used * move definition of AUTOCONFIGURE variable into base image * add logic to kapps and kdav container * add autoconfigure to konnect container * update build stage to latest golang * add autoconfig to remaining images * delete obsolete apache config in z-push folder * when specifying config paths use KOPANO_CONFIG_PATH * also use env variable in helper scripts * add message about removal of kopano-cli
Kopano Web image
Reverse Proxy to securely and with as less configuration effort as possible expose Kopano to the public internet.
In its default configuration this container will redirect requests to the root of the domain (so for example when opening https://kopano.demo/ in a browser) to https://kopano.demo/webapp. To redirect to a different path the environment variable DEFAULTREDIRECT needs to be configured.
Example:
# the following value needs to be added to .env
DEFAULTREDIRECT=/meet
Serving additional files
Kweb in the Web container can easily be extended to serve static content. By default it will serve all content that has been copied into /var/www/. To extend the built in configuration file just add an additional file into /etc/kweb-extras/. Kweb is using the Caddyfile syntax.
Using existing ssl certificates
By default this container will use automatic tls certificates provided by Let's Encrypt. This can be influenced through the following environment variables:
# 1. Automatic certificate from Let's Encrypt
TLS_MODE=tls_auto
EMAIL=example@example.com
# 2. Custom certificate and key
TLS_MODE=tls_custom
TLS_CERT=/src/ssl/cert.pem
TLS_KEY=/src/ssl/key.pem
# 3. Self signed certificate (FOR DEBUGGING)
TLS_MODE=tls_selfsigned
# 4. Disable TLS entirely
TLS_MODE=tls_off
Using a reverse proxy in front of this container
In case there is already an ssl terminating proxy in the network this container can be switched to plain http by either setting EMAIL=off or TLS_MODE=tls_off.
In addition to this the default docker-compose.yml has a tweak to route all traffic for the configured domain through this container. This route needs to be changed when this container is only offering http access by either putting another domain in FQDNCLEANED or removing this section altogether.
When using an external reverse proxy it is recommended to proxy connections to port 2015 of this container. Additionally connections to /api/kwm/v2/rtm/websocket need to be upgraded to websocket connections.
Information needed when not running your own reverse proxy
The kopano_webapp container is accessible on port 9080 and serves the WebApp on /webapp.