Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

https://github.com/nemanjam/dokku-deployment


https://github.com/nemanjam/dokku-deployment

Last synced: 5 months ago
JSON representation

Awesome Lists containing this project

README 

          
### Dokku routed through Traefik



- Dokku dns setup [docs](https://dokku.com/docs/networking/dns/)

- `docker-compose.yml` [example1](https://gist.github.com/GegeDesembri/9e5a49b4c49f6136e2b5b3e7af373c8e), [example2](https://gist.github.com/joshghent/39fa894630b55bd32aabf2bd09544ba3)

- generate ssh keys [tutorial](https://linuxize.com/post/how-to-set-up-ssh-keys-on-ubuntu-20-04/)

- Dokku Docker installation [docs](https://dokku.com/docs/getting-started/install/docker/)

- Dokku install on host [freecodecamp](https://www.freecodecamp.org/news/how-to-build-your-on-heroku-with-dokku/)



### Generate key at /home/username/.ssh/id_rsa (on Desktop, for Git)



```bash



ssh-keygen -t rsa -b 4096 -C "your_email@domain.com"



# move to (chmod 600):

~/.ssh/oracle_amd1/dokku_docker_amd1__id_rsa

~/.ssh/oracle_amd1/dokku_docker_amd1__id_rsa.pub

```



#### add to ~/.ssh/config



```bash

# Dokku docker amd1

Host dokku.localhost3000.live

    HostName dokku.localhost3000.live

    PreferredAuthentications publickey

    IdentityFile ~/.ssh/oracle_amd1/dokku_docker_amd1__id_rsa

    Port 3022

```



- open 3022 (as destination port) on server



### Add public key to dokku container (on server)



```bash

# on desktop

# temp copy pub key to server to home folder

scp ~/.ssh/oracle_amd1/dokku_docker_amd1__id_rsa.pub ubuntu@amd1:/home/ubuntu/dokku_docker_amd1__id_rsa.pub



# on server

# prefix to exec commands in container (no need to enter container)

docker exec -it dokku bash



# list keys

docker exec -it dokku bash dokku ssh-keys:list



# copy key in /tmp in container (maybe add shared volume)

# container id changes every time

docker cp /home/ubuntu/dokku_docker_amd1__id_rsa.pub d0b2477737d5:/tmp/



# check if copied

# enter container

docker exec -it dokku bash

# list /tmp/

ls -la



# add SSH key from container to Dokku

docker exec -it dokku bash dokku ssh-keys:add admin /tmp/dokku_docker_amd1__id_rsa.pub



# list keys

docker exec -it dokku bash dokku ssh-keys:list



# delete temp key

docker exec -it dokku bash

rm -rf ./dokku_docker_amd1__id_rsa.pub

ls -la



```



### Deploy an app from src (this builds image on server - needs RAM)



- deploy app [docs](https://dokku.com/docs/deployment/application-deployment/)



```bash

# 1. without database



# on server (in dokku container)

# for url: lure-shop-react.dokku.localhost3000.live

docker exec -it dokku bash dokku apps:create lure-shop-react



# add remote (in local app git repo)

git remote add dokku dokku@dokku.localhost3000.live:lure-shop-react

git push dokku master:master



```



### Deploy app from Docker image



- [docs](https://dokku.com/docs/deployment/methods/git/#initializing-an-app-repository-from-a-docker-image)



---



#### Aliases



```

nano ~/.bashrc



# exec dokku in container

alias dokkuc="docker exec -it dokku bash dokku"



# docker compose up/down

alias dcdown="docker compose down"

alias dcup="docker compose up -d"



# reload shell to apply

source ~/.bashrc

```



## Add public key to dokku container (on server) - simpler way



### Reset Dokku container



```bash

# remove dokku container

ssh ubuntu@arm1 "

cd ~/dokku-deployment &&

docker compose down

"



# delete dokku volume

ssh ubuntu@arm1 "

sudo rm -rf ~/dokku-deployment/dokku-data &&

ls -la ~/dokku-deployment

"



# start dokku container

ssh ubuntu@arm1 "

cd ~/dokku-deployment &&

docker compose up -d

"

```



#### Oneliner set local key to remote container



```bash

# set key, works multiline, container must run

scp ~/.ssh/oracle/dokku_docker__id_rsa.pub ubuntu@arm1:/tmp/ && \

ssh ubuntu@arm1 " \

  docker exec -i dokku bash dokku ssh-keys:add admin < /tmp/dokku_docker__id_rsa.pub && \

  rm /tmp/dokku_docker__id_rsa.pub \

"



# remove key

ssh ubuntu@arm1 "docker exec dokku bash dokku ssh-keys:remove admin"



# list keys

ssh ubuntu@arm1 "docker exec dokku bash dokku ssh-keys:list"



```



# Prepare ARM server for buildpacks - IMPORTANT



```bash

docker run --privileged --rm tonistiigi/binfmt --install all

```



# Attach all app containers to traefik and dokku external network - IMPORTANT (only for Nginx)



```bash

# this attaches to Nginx but detaches from traefik

dokku network:set --global initial-network dokku-external



# this exposes app to host without proxy, 0.0.0.0:32770:5000, host:container

# i dont need this

 dokku network:set --global bind-all-interfaces true

```



### Add remote, create app and push



```bash

# add remote

git remote add dokku dokku@dokku.arm1.localhost3002.live:nextjs-app



# create app

dokku apps:create nextjs-app



# list all apps

dokku apps:list



# check app networks

dokku network:report nextjs-app



# list all networks

dokku network:list



# push

git push dokku main:main

```



### Setup Lets Encrypt



```bash

# lista all installed plugins

dokku plugin:list



# check if letsencrypt is installed, doesnt work

# it is included in apps/dokku/dokku-data/plugin-list

dokku plugin:installed letsencrypt



# if not installed already

dokku plugin:install https://github.com/dokku/dokku-letsencrypt.git

dokku plugin:install https://github.com/dokku/dokku-letsencrypt.git --committish 0.17.0



dokku plugin:install https://github.com/dokku/dokku-letsencrypt.git --committish 0.19.0



# uninstall

dokku plugin:uninstall letsencrypt



# set global email for all apps

# cant be set per app...

dokku config:set --global DOKKU_LETSENCRYPT_EMAIL=miroljub.petrovic.acc@gmail.com



# it prints i have to set email like this

dokku letsencrypt:set nextjs-app email miroljub.petrovic.acc@gmail.com



# enable for app

dokku letsencrypt:enable nextjs-app



# check for app

dokku letsencrypt:active nextjs-app



# enable auto-renewal

dokku letsencrypt:cron-job --add

```



### Start, stop, rebuild app



```bash

# enter container

docker exec -it dokku bash



# debug all config

dokku config:show nextjs-app



# debug processes

dokku ps:report



# debug ports

dokku proxy:ports nextjs-app



# stop

dokku ps:stop nextjs-app



# start

dokku ps:start nextjs-app



# rebuild, redeploy app

dokku ps:rebuild nextjs-app



# test https, -v

curl http://nextjs-app.dokku.arm1.localhost3002.live

curl https://nextjs-app.dokku.arm1.localhost3002.live



# disable hsts nginx

dokku nginx:set --global hsts false



# debug domains, .env file

dokku domains:report --global

dokku domains:report nextjs-app



# debug nginx - default proxy

dokku nginx:show-config



# verbose, complete

# print everything about app

dokku report nextjs-app

dokku ps:inspect $APP

sudo apt install tree

tree -da .

```



### Volume and env var must match - ${PWD}/dokku-data



```yaml

# DOKKU_HOST_ROOT = path on host, volume path + /home/dokku



environment:

  - DOKKU_HOST_ROOT=${PWD}/dokku-data/home/dokku

volumes:

  - ${PWD}/dokku-data:/mnt/dokku

  - ${PWD}/plugin-list:/mnt/dokku/plugin-list

```



### Set custom buildpacks



```bash

# pack installed in Dockerfile



# report

dokku buildpacks:report



# set globally

dokku buildpacks:set-property --global stack paketobuildpacks/builder:base



# unset globally, reset to default gliderlabs/herokuish:latest

dokku buildpacks:set-property --global stack



# possible buildpack options

# must run in js app folder

ubuntu@arm1:~/NODE-JS-APP$ pack builder suggest

Suggested builders:

Google:                gcr.io/buildpacks/builder:v1

Heroku:                heroku/builder:22

Heroku:                heroku/buildpacks:20

Paketo Buildpacks:     paketobuildpacks/builder:base

Paketo Buildpacks:     paketobuildpacks/builder:full

Paketo Buildpacks:     paketobuildpacks/builder:tiny

```



### Steps



1. set ssh key

2. attach all aps to external network

3. create app, add remote

4. push and deploy

5. letsencript ssl

6.



### Dokku is behind Traefik, this isn't the problem



Ovo je fora, mora da bude dostupan https i http, a ne iza traefik, ovde reko



https://github.com/dokku/dokku-letsencrypt#dockerfile-and-image-based-deploys



### Run Dokku in http hsts mode - wrong, wont work



Traefik can set it too...



```bash

# remove containers



# print options

dokku nginx:report nextjs-app



# disable hsts check, default is true

dokku nginx:set --global hsts false



# rebuild proxy after edit

dokku proxy:build-config nextjs-app



# create and run containers

```



### Switch to Traefik proxy for Lets encrypt, because Nginx letsencrypt is broken



```bash

# create app

dokku apps:create nextjs-app



# switch to treafik, set this before push to avoid rebuild

dokku proxy:set nextjs-app traefik



# rebuild app, not just proxy, only if pushed already

dokku ps:rebuild nextjs-app



# start/stop treafik

# problem: this container is on separate network from app and dokku containers

# must disable 80 on dokku container to free it for traefik, nginx goes through dokku, wtf

dokku traefik:start



# enable letsencrypt for traefik globally

# must rebuild apps and restart traefik, damn

dokku traefik:set --global letsencrypt-email miroljub.petrovic.acc@gmail.com



# report

dokku traefik:report

```



## Setup dokku-deployment



```bash

# create global network

docker network create dokku-external



# create .env

cp .env.example .env



# open 9433 destination port on server



# attach to network, global

dokku network:set --global initial-network dokku-external



# attach app to network

dokku network:set nextjs-app initial-network dokku-external



# switch to traefik



```



### Access Portainer



https://arm1.localhost3002.live:9443



probaj ovo



https://github.com/dokku/dokku-letsencrypt/issues/274

sudo dokku plugin:install https://github.com/dokku/dokku-letsencrypt.git --committish 0.17.0