version: '2'
services:
proxy:
image: jwilder/nginx-proxy
ports:
- 0.0.0.0:80:80
- 0.0.0.0:443:443
volumes:
- /var/run/docker.sock:/tmp/docker.sock
- ./certs/:/etc/nginx/certs:ro
- ./jira-nginx.conf:/etc/nginx/vhost.d/jira.local.net
networks:
- proxy
jira:
image: q2digger/jira-software-eap:latest
ports:
- 0.0.0.0:8081:8080
volumes:
- _jiradata:/var/atlassian/jira
- _jiralogs:/opt/atlassian/jira/logs
- ./jira.config:/opt/atlassian/jira/conf/jira.config
- ./certs/:/ssl/root
networks:
- jira
- proxy
environment:
JVM_MINIMUM_MEMORY: '2048m'
JVM_MAXIMUM_MEMORY: '4096m'
CATALINA_CONNECTOR_PROXYNAME: 'jira.local.net'
CATALINA_CONNECTOR_PROXYPORT: '443'
CATALINA_CONNECTOR_SCHEME: 'https'
VIRTUAL_HOST: 'jira.local.net'
VIRTUAL_PORT: '8080'
volumes:
_jiradata:
_jiralogs:
networks:
jira:
proxy:
# Fail2Ban configuration file
#
# Author: Cyril Jaquier
#
#
[INCLUDES]
before = iptables-common.conf
[Definition]
# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart = <iptables> -N f2b-<name>
<iptables> -A f2b-<name> -j <returntype>
<iptables> -I <chain> -p <protocol> --dport <port> -j f2b-<name>
# Option: actionstop
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
actionstop = <iptables> -D <chain> -p <protocol> --dport <port> -j f2b-<name>
<iptables> -F f2b-<name>
<iptables> -X f2b-<name>
# Option: actioncheck
# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck = <iptables> -n -L <chain> | grep -q 'f2b-<name>[ \t]'
# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionban = <iptables> -I f2b-<name> 1 -s <ip> -j <blocktype>
# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionunban = <iptables> -D f2b-<name> -s <ip> -j <blocktype>
[Init]
logLevel = DEBUG
logtarget = /var/log/fail2ban.log
2019-08-20 21:26:31,218 fail2ban.jail [16029]: INFO Creating new jail 'nginx-nokiddies'
2019-08-20 21:26:31,218 fail2ban.jail [16029]: INFO Jail 'nginx-nokiddies' uses poller
2019-08-20 21:26:31,219 fail2ban.jail [16029]: INFO Initiated 'polling' backend
[DEFAULT]
ignoreip = 127.0.0.1/8
ignorecommand =
bantime = 600
findtime = 600
maxretry = 3
[nginx-nokiddies]
enabled = true
filter = nginx-nokiddies
port = http,https
logpath = /var/log/nginx*/*access.log
action = iptables-multiport[name=NiKiddies, port="http,https"]
findtime = 3600
bantime = -1
maxretry = 2[netxmx]
name=netxms repo
baseurl=http://packages.netxms.org/centos/7/
enabled=1
gpgcheck=1
gpgkey=http://packages.netxms.org/netxms.gpg[root@localhost ~]# yum makecache
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
epel/x86_64/metalink | 22 kB 00:00:00
* base: mirror.linux-ia64.org
* epel: mirror.logol.ru
* extras: mirror.linux-ia64.org
* updates: mirror.reconn.ru
base | 3.6 kB 00:00:00
extras | 3.4 kB 00:00:00
netxmx | 2.9 kB 00:00:00
updates | 3.4 kB 00:00:00
Metadata Cache Created
[root@localhost ~]# yum search netxms
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.linux-ia64.org
* epel: mirror.nextlayer.at
* extras: mirror.linux-ia64.org
* updates: mirror.reconn.ru
============================================================== N/S matched: netxms ==============================================================
netxms.x86_64 : NetXMS meta package
netxms-agent.x86_64 : NetXMS Agent
netxms-agent-mqtt.x86_64 : NetXMS subagent for MQTT
netxms-agent-vmgr.x86_64 : NetXMS subagent for monitoring hypervisors
netxms-agent-xen.x86_64 : NetXMS subagent for monitoring XEN
netxms-debuginfo.x86_64 : Debug information for package netxms
netxms-base.x86_64 : base
netxms-client.x86_64 : client
netxms-dbdrv-odbc.x86_64 : odbc
netxms-dbdrv-pgsql.x86_64 : pgsql
netxms-dbdrv-sqlite3.x86_64 : sqlite
netxms-server.x86_64 : server
Name and summary matches only, use "search all" for everything.
[root@localhost ~]# yum install netxms-server
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.linux-ia64.org
* epel: fedora.tu-chemnitz.de
* extras: mirror.linux-ia64.org
* updates: mirror.reconn.ru
Resolving Dependencies
--> Running transaction check
---> Package netxms-server.x86_64 0:2.2.15.2-1.el7 will be installed
--> Processing Dependency: netxms-base = 2.2.15.2 for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: netxms-dbdrv for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libzmq.so.5()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnxtre.so.5()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnxsnmp.so.2()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnxlp.so.2()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnxdb.so.2()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnxagent.so.2()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libnetxms.so.2()(64bit) for package: netxms-server-2.2.15.2-1.el7.x86_64
--> Running transaction check
---> Package netxms-agent.x86_64 0:2.2.15.2-1.el7 will be installed
--> Processing Dependency: netxms-dbdrv-sqlite3 = 2.2.15.2 for package: netxms-agent-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libssh.so.4()(64bit) for package: netxms-agent-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libsensors.so.4()(64bit) for package: netxms-agent-2.2.15.2-1.el7.x86_64
---> Package netxms-base.x86_64 0:2.2.15.2-1.el7 will be installed
---> Package netxms-dbdrv-odbc.x86_64 0:2.2.15.2-1.el7 will be installed
--> Processing Dependency: unixODBC for package: netxms-dbdrv-odbc-2.2.15.2-1.el7.x86_64
--> Processing Dependency: libodbc.so.2()(64bit) for package: netxms-dbdrv-odbc-2.2.15.2-1.el7.x86_64
---> Package zeromq.x86_64 0:4.1.4-6.el7 will be installed
--> Processing Dependency: libpgm-5.2.so.0()(64bit) for package: zeromq-4.1.4-6.el7.x86_64
--> Processing Dependency: libsodium.so.23()(64bit) for package: zeromq-4.1.4-6.el7.x86_64
--> Running transaction check
---> Package libsodium.x86_64 0:1.0.18-1.el7 will be installed
---> Package libssh.x86_64 0:0.7.1-7.el7 will be installed
---> Package lm_sensors-libs.x86_64 0:3.4.0-6.20160601gitf9185e5.el7 will be installed
---> Package netxms-dbdrv-sqlite3.x86_64 0:2.2.15.2-1.el7 will be installed
---> Package openpgm.x86_64 0:5.2.122-2.el7 will be installed
---> Package unixODBC.x86_64 0:2.3.1-11.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=================================================================================================================================================
Package Arch Version Repository Size
=================================================================================================================================================
Installing:
netxms-server x86_64 2.2.15.2-1.el7 netxmx 11 M
Installing for dependencies:
libsodium x86_64 1.0.18-1.el7 epel 147 k
libssh x86_64 0.7.1-7.el7 extras 195 k
lm_sensors-libs x86_64 3.4.0-6.20160601gitf9185e5.el7 base 42 k
netxms-agent x86_64 2.2.15.2-1.el7 netxmx 269 k
netxms-base x86_64 2.2.15.2-1.el7 netxmx 287 k
netxms-dbdrv-odbc x86_64 2.2.15.2-1.el7 netxmx 13 k
netxms-dbdrv-sqlite3 x86_64 2.2.15.2-1.el7 netxmx 12 k
openpgm x86_64 5.2.122-2.el7 epel 171 k
unixODBC x86_64 2.3.1-11.el7 base 413 k
zeromq x86_64 4.1.4-6.el7 epel 556 k
Transaction Summary
=================================================================================================================================================
Install 1 Package (+10 Dependent packages)
Total download size: 13 M
Installed size: 111 M
Is this ok [y/d/N]:yum install epel-relese
yum install mosquitto-devel
вот содержимое.
если интересно, полный проект вот.
https://github.com/q2digger/docker-jira-software