ibacalu/onetime repository overview

⁠OneTimeSecrets with Docker and Hashicorp's Vault

Description:

⁠Setup OpenVPN

• Prequisites:

  • basic linux knowledge
  • have docker already installed
  • have full access to the machine where docker is installed. We will refer to it as `## Setup OpenVPN

• Prequisites:

  • basic linux knowledge
  • have docker already installed
  • have full access to the machine where docker is installed. We will refer to it as docker-vm from now on.
  • be able to do port-forwarding to docker-vm
  • vault container up and running⁠

• Setup:

  • connect to docker-vm machine and create your work directory

    ssh docker-vm
    # Preparing structure
    mkdir -p qts && cd qts
    git clone https://gitlab.com/qts.cloud/showcase/docker/onetime.git
    cd onetime
    

    Copy

  • Check out docker-compose.yml

    version: "3"
    
    services:
      onetime:
        image: ibacalu/onetime:latest
        environment:
          VAULT_TOKEN: ${VAULT_TOKEN}
          VAULT_ADDR: ${VAULT_ADDR}
        restart: always
        ports:
          - 8080:80
    

    Copy

  • Start OneTime

    # Export Vault Config
    export VAULT_TOKEN='s.XXXXXXXXX'
    export VAUTL_ADDR='http://127.0.0.1:8200'
    
    # Launch container
    docker-compose up -d                # Run the container as a daemon
    docker-compose logs -f onetime      # Follow the logs
    [...]
    onetime_1  | [INFO] Starting gunicorn 20.0.4
    onetime_1  | [INFO] Listening at: http://0.0.0.0:80 (1)
    onetime_1  | [INFO] Using worker: sync
    onetime_1  | [INFO] Booting worker with pid: 8
    [...]
    

    Copy