VimUnDo Bșo$'AdLxRU          -          k       k   k   k    ^_#    _                                                                                                                                                                                                                                                                                                                                                                                          ^^MY                        5_                                                                                                                                                                                                                                                                                                                                                                                         ^^Mw                     5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                      :put *5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                               5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                    sudo apt-get update5_                                                                                                                                                                                                                                                                                                                                                                                        ^^M                               5_                                                                                                                                                                                                                                                                                                                                                                                        ^^M              
      sudo apt-get install \       apt-transport-https \       ca-certificates \   
    curl \       gnupg2 \       software-properties-common5_      	                                                                                                                                                                                                                                                                                                                                                                                  ^^M              
    5_      
           	                                                                                                                                                                                                                                                                                                                                                                        ^^M                  5_   	              
   
                                                                                                                                                                                                                                                                                                                                                                     ^^M        
             
          5_   
                                                                                                                                                                                                                                                                                                                                                                                      ^^M                               5_      
                                                                                                                                                                                                                                                                                                                                                                                  ^^M                               5_                 
                                                                                                                                                                                                                                                                                                                                                                        ^^M                               5_   
                                                                                                                                                                                                                                                                                                                                                                                      ^^M        
            Lcurl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -   sudo add-apt-repository \   ?   "deb [arch=amd64] https://download.docker.com/linux/debian \      $(lsb_release -cs) \   
   stable"   sudo apt-get update   :sudo apt-get install docker-ce docker-ce-cli containerd.io5_                    
                                                                                                                                                                                                                                                                                                                                                                     ^^M           
           5_                    
                                                                                                                                                                                                                                                                                                                                                                    ^^M        
             
          5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                               5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                               5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                      5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                      5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M        
              5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                      5_                                                                                                                                                                                                                                                                                                                                                                                         ^^M                     5_                                                                                                                                                                                                                                                                                                                                                                                        ^^M                                  5_                                                                                                                                                                                                                                                                                                                                                                                        ^^N                    install docekr5_                                                                                                                                                                                                                                                                                                                                                                                         ^^O                       5_                                                                                                                                                                                                                                                                                                                                                                                         ^^O                      +sudo chmod +x /usr/local/bin/docker-compose5_                       )                                                                                                                                                                                                                                                                                                                                                                 ^^O                                                                         5_                                                                                                                                                                                                                                                                                                                                                                                         ^^O'                               5_                                                                                                                                                                                                                                                                                                                                                                                         ^^O(                    sudo curl -L "https://github.com/docker/compose/releases/download/1.25.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose5_                                                                                                                                                                                                                                                                                                                                                                                         ^^O*                                  5_      !                  ,                                                                                                                                                                                                                                                                                                                                                                 ^^O`                                      5_       $           !      :                                                                                                                                                                                                                                                                                                                                                                 ^^O                                   5_   !   %   "       $                                                                                                                                                                                                                                                                                                                                                                        ^^O                     "sudo apt-get install apache2-utils5_   $   &           %                                                                                                                                                                                                                                                                                                                                                                       ^^O                                   5_   %   '           &                                                                                                                                                                                                                                                                                                                                                                        ^^O                      "htpasswd -nb admin secure_password5_   &   (           '                                                                                                                                                                                                                                                                                                                                                                       ^^O                                       5_   '   )           (                                                                                                                                                                                                                                                                                                                                                                        ^^O               !                       5_   (   *           )       #                                                                                                                                                                                                                                                                                                                                                                 ^^Q            $   "               "   !    5_   )   +           *   "                                                                                                                                                                                                                                                                                                                                                                     ^^Q        !   $   $       5_   *   ,           +   !                                                                                                                                                                                                                                                                                                                                                                     ^^Q        !   $   &          !   #   %    5_   +   -           ,   "                                                                                                                                                                                                                                                                                                                                                                     ^^Q        !   #   '       5_   ,   .           -   "   
                                                                                                                                                                                                                                                                                                                                                                 ^^Q        !   #   '      mkdir -p /vardocker/traefik5_   -   /           .   "   
                                                                                                                                                                                                                                                                                                                                                                 ^^Q        "   $   (          "   $   '    5_   .   0           /   #                                                                                                                                                                                                                                                                                                                                                                    ^^Q        "   $   (      cd /vardocker/traefik5_   /   1           0   #                                                                                                                                                                                                                                                                                                                                                                    ^^Q        #   %   )          #   %   (    5_   0   2           1   %                                                                                                                                                                                                                                                                                                                                                                     ^^Q        $   %              
traefik.toml:5_   1   3           2   %                                                                                                                                                                                                                                                                                                                                                                     ^^R       $   D   '          %   &   '    5_   2   4           3   ,                                                                                                                                                                                                                                                                                                                                                                    ^^R       +   -   E      >        users = ["ray:$apr1$0Saq6/iv$2.TBOiyPefd/U2E42iqsT1O"]5_   3   5           4   E                                                                                                                                                                                                                                                                                                                                                                     ^^Rn        E               E            5_   4   6           5                                                                                                                                                                                                                                                                                                                                                                        ^^Rw              G                F    5_   5   7           6                                                                                                                                                                                                                                                                                                                                                                        ^^R              G      9  https://docs.docker.com/install/linux/docker-ce/debian/5_   6   8           7                                                                                                                                                                                                                                                                                                                                                                        ^^R              G        sudo apt-get update     sudo apt-get install \         apt-transport-https \         ca-certificates \         curl \         gnupg2 \          software-properties-common   N  curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -     sudo add-apt-repository \   @    "deb [arch=amd64] https://download.docker.com/linux/debian \       $(lsb_release -cs) \       stable"     sudo apt-get update   <  sudo apt-get install docker-ce docker-ce-cli containerd.io5_   7   9           8                                                                                                                                                                                                                                                                                                                                                                        ^^R              H                G    5_   8   ;           9                                                                                                                                                                                                                                                                                                                                                                        ^^R              I      install docker-compose5_   9   <   :       ;                                                                                                                                                                                                                                                                                                                                                                        ^^R              I      install docker5_   ;   =           <                                                                                                                                                                                                                                                                                                                                                                       ^^R              I      ##############5_   <   >           =                                                                                                                                                                                                                                                                                                                                                                        ^^R              I      *  https://docs.docker.com/compose/install/5_   =   ?           >                                                                                                                                                                                                                                                                                                                                                                        ^^R              J                I    5_   >   @           ?                                                                                                                                                                                                                                                                                                                                                                       ^^R              J      a  # NOTE wil need to use the latest version number in the curl URL - it's 1.25.4 in the one below     sudo curl -L "https://github.com/docker/compose/releases/download/1.25.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose   -  sudo chmod +x /usr/local/bin/docker-compose5_   ?   A           @   !                                                                                                                                                                                                                                                                                                                                                                     ^^R            "   J      ;install traefik with basic HTTP authorisation for dashboard5_   @   B           A   "                                                                                                                                                                                                                                                                                                                                                                    ^^R        !   %   J      $  sudo apt-get install apache2-utils   I  # wil use output of following to set up basic HTTP authorisation later:   $  htpasswd -nb admin secure_password5_   A   C           B   (                                                                                                                                                                                                                                                                                                                                                                     ^^R        (   +   K          (   *   J    5_   B   D           C   I   
                                                                                                                                                                                                                                                                                                                                                                 ^^R        I   K   M          I   K   L    5_   C   E           D   M                                                                                                                                                                                                                                                                                                                                                                     ^^R       L              docker network create web5_   D   F           E   M                                                                                                                                                                                                                                                                                                                                                                    ^^R        S                  T               N                  O               M                  N               M            5_   E   G           F   Z   (                                                                                                                                                                                                                                                                                                                                                                 ^^S8        Y   [   ^      5  -l traefik.frontend.rule=Host:monitor.your_domain \5_   F   H           G   Q                                                                                                                                                                                                                                                                                                                                                                    ^^SD   	    Q   S   _          Q   S   ^    5_   G   I           H   R                                                                                                                                                                                                                                                                                                                                   _          T           v        ^^T   
    Q   S   _      =# note the -l traefik.frontebnd rule - domain must be correct5_   H   J           I   $   
                                                                                                                                                                                                                                                                                                                                $          $           v        ^^W       #   %   _      "htpasswd -nb admin secure_password5_   I   K           J   $                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^gx        $   &   _       $   %   _    5_   J   L           K   $                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^gz        #   $           htpasswd -nb ray secure_password5_   K   M           L   $                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^g        #   %   _      Necho $(htpasswd -nbB ray zSm2w--d3sdg4sm--Ymjv2J-nSqgK) | sed -e 's/\$/\$\$/g'5_   L   N           M   #                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^g        "   $   _      G# wil use output of following to set up basic HTTP authorisation later:5_   M   O           N   $                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^g        $   (   `          $   &   _    5_   N   P           O   '                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^g        &   (   b      H#   like * or $ it might not work because of shell expansion or whatever5_   O   Q           P   '   L                                                                                                                                                                                                                                                                                                                                $          $           v        ^^g        &   )   c      M#   like * or $ or { it might not work because of shell expansion or whatever       '   )   c          '   )   b    5_   P   R           Q   (   <                                                                                                                                                                                                                                                                                                                                $          $           v        ^^h       (   *   d          (   *   c    5_   Q   S           R   +                                                                                                                                                                                                                                                                                                                                   $          $           v        ^^h:        *   +       :   mkdir -p /var/docker/traefik   cd /var/docker/traefik   vim traefik.toml       # traefik.toml   &defaultEntryPoints = ["http", "https"]       
[entryPoints]     [entryPoints.dashboard]       address = ":8080"        [entryPoints.dashboard.auth]   (      [entryPoints.dashboard.auth.basic]   6        users = ["OUTPUT FROM HTPASSWD COMMAND ABOVE"]     [entryPoints.http]       address = ":80"   !      [entryPoints.http.redirect]           entryPoint = "https"     [entryPoints.https]       address = ":443"         [entryPoints.https.tls]       [api]   entrypoint="dashboard"       [acme]   email = "wptest@isnet.uk"   storage = "acme.json"   entryPoint = "https"   onHostRule = true     [acme.httpChallenge]     entryPoint = "http"       [docker]   domain = "wptest.isnet.uk"   watch = true   network = "web"   # end of traefik.toml           sudo docker network create web   touch acme.json   chmod 600 acme.json       vim traefik_run.sh   <# note the -l traefik.frontend rule - domain must be correct       	#!/bin/sh   docker run -d \   0  -v /var/run/docker.sock:/var/run/docker.sock \   &  -v $PWD/traefik.toml:/traefik.toml \      -v $PWD/acme.json:/acme.json \     -p 80:80 \     -p 443:443 \   9  -l traefik.frontend.rule=Host:monitor.wptest.isnet.uk \     -l traefik.port=8080 \     --network web \     --name traefik \     traefik:1.7.2-alpine5_   R   U           S   *                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^h;        )               5_   S   V   T       U   +                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^hT        *   ,   +       +            5_   U   W           V   +                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^hU   
    +   -   ,    5_   V   X           W   -                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^rV       ,               5_   W   Y           X                                                                                                                                                                                                                                                                                                                                       $          $           v        ^^r              0                /    5_   X   Z           Y                                                                                                                                                                                                                                                                                                                                      '          '           v        ^^r              2      
# cerate user5_   Y   [           Z                                                                                                                                                                                                                                                                                                                                      '          '           v        ^^r              2      # crate user         2    5_   Z   \           [   2                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^r       2                  2            5_   [   ]           \   6                                                                                                                                                                                                                                                                                                                                    '          '           v        ^^t        5               5_   \   ^           ]   7                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^t        7               7            5_   ]   _           ^   8                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^t        7   9   9      sudo ufw allow ssh5_   ^   `           _   9                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^t        8              sudo ufw allow ssh5_   _   a           `   9                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^t        8              sudo ufw allow http5_   `   c           a   9                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^t       9                  9            5_   a   d   b       c   :                                                                                                                                                                                                                                                                                                                                   '          '           v        ^^w       :                  :            5_   c   e           d   >                                                                                                                                                                                                                                                                                                                                    '          '           v        ^_       >                  >            5_   d   f           e                                                                                                                                                                                                                                                                                                                                                                        ^_                   B   server - debian 10       
# create user           # install docker   ################   :#  https://docs.docker.com/install/linux/docker-ce/debian/       sudo apt-get update   sudo apt-get install \       apt-transport-https \       ca-certificates \   
    curl \       gnupg2 \       software-properties-common   Lcurl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -   sudo add-apt-repository \   >  "deb [arch=amd64] https://download.docker.com/linux/debian \     $(lsb_release -cs) \   	  stable"   sudo apt-get update   :sudo apt-get install docker-ce docker-ce-cli containerd.io               # install docker-compose   #########################   +#  https://docs.docker.com/compose/install/       _# NOTE wil need to use the latest version number in the curl URL - it's 1.25.4 in the one below   sudo curl -L "https://github.com/docker/compose/releases/download/1.25.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose   +sudo chmod +x /usr/local/bin/docker-compose           =# install traefik with basic HTTP authorisation for dashboard   "sudo apt-get install apache2-utils   H# will use output of following to set up basic HTTP authorisation later:   Eecho $(htpasswd -nbB ray <PASSWORD_GOES_HERE>) | sed -e 's/\$/\$\$/g'   G# NOTE - when enclosing password in quotes it produces different output   J#   i didn't use quotes and it worked, however if using special characters   N#   like * or $ or { it might not work depending on if quotes are used  or not   =#   and wheteger expansions or any other shennanigans occurs.   G#   need to look into this properly - maybe write blog post about it yo       [https://medium.com/@containeroo/traefik-2-0-docker-a-simple-step-by-step-guide-e0be0c17cfa5       +# also install portainer from above article   L# NOTE - some things were changed - network name (proxy -> web), domain, etc   1# use configuration files from server as the base           # install firewall   sudo apt install ufw   sudo ufw allow ssh   sudo ufw allow http   sudo ufw allow https   sudo ufw enable       # TODO        # monitoring       # Considerations       #security - running as non-root user5_   e   g           f                                                                                                                                                                                                                                                                                                                                                                        ^_                                       5_   f   h           g                                                                                                                                                                                                                                                                                                                                                                        ^_               *                 )    5_   g   i           h                                                                                                                                                                                                                                                                                                                                                                       ^_              -      echo ""5_   h   j           i   -                                                                                                                                                                                                                                                                                                                                                                     ^_        ,               5_   i   k           j   -                                                                                                                                                                                                                                                                                                                                                                    ^_       ,              " > "5_   j               k                                                                                                                                                                                                                                                                                                                                                                        ^_"                  -               echo "   version: "3"       	networks:     web:       external: true     internal:       external: false       	services:     blog:       image: wordpress:latest       container_name: blog       environment:   -      WORDPRESS_DB_PASSWORD: dklfm904mg-uiojn       labels:         - "traefik.enable=true"   4      - "traefik.http.routers.blog.entrypoints=http"   E      - "traefik.http.routers.blog.rule=Host(`blog.wptest.isnet.uk`)"   R      - "traefik.http.middlewares.blog-https-redirect.redirectscheme.scheme=https"   C      - "traefik.http.routers.blog.middlewares=blog-https-redirect"   <      - "traefik.http.routers.blog-secure.entrypoints=https"   L      - "traefik.http.routers.blog-secure.rule=Host(`blog.wptest.isnet.uk`)"   3      - "traefik.http.routers.blog-secure.tls=true"   @      - "traefik.http.routers.blog-secure.tls.certresolver=http"   @      - "traefik.http.services.blog.loadbalancer.server.port=80"   7      - "traefik.http.routers.blog-secure.service=blog"   $      - "traefik.docker.network=web"   
    networks:         - internal         - web       depends_on:   
      - mysql     mysql:       image: mysql:5.7       environment:   +      MYSQL_ROOT_PASSWORD: dklfm904mg-uiojn   
    networks:         - internal       labels:         - traefik.enable=false   " > docker-compose.yml5_   a           c   b   &   /                                                                                                                                                                                                                                                                                                                                '          '           v        ^^u        &   '   :       %   '   :      Q# will use output of following to set up basic HDashboardTTP authorisation later:5_   S           U   T   +                                                                                                                                                                                                                                                                                                                                    $          $           v        ^^hL        +   ,           *   +   +      Necho $(htpasswd -nbB ray zSm2w--d3sdg4sm--Ymjv2J-nSqgK) | sed -e 's/\$/\$\$/g'5_   9           ;   :                                                                                                                                                                                                                                                                                                                                                                       ^^R              I      i# nstall docker5_   !   #       $   "                                                                                                                                                                                                                                                                                                                                                                        ^^O                                           ;install traefik with basic HTTP authorisation for dashboard5_   "               #       :                                                                                                                                                                                                                                                                                                                                                                 ^^O            !                  "              ;install traefik with basic HTTP authorisation for dashboard5