❗ Archived / Not working
This repo was a hack to get Let's Encrypt certificates working with Ghost in a containerised way. After several updates to the containers on which this depended, this no longer works. Ghost now has Let's Encrypt support built-in - use that instead.

Deionarra

This is what my eyes see, my Love, unfettered by the shackles of Time.

Ghost blog with SSL/TLS certificates from Let's Encrypt and a MySQL/MariaDB database, deployed using Docker Compose with named volumes for the Ghost and DB containers.

This is a simple Docker Compose configuration that will spin up containers running Ghost and MySQL (or MariaDB) using the official images from Docker.

It then uses Jason Wilder's (@jwilder) docker-gen for nginx to create a reverse proxy, along with the Let's Encrypt companion container from JrCs to enable TLS.

Setup

Download the latest nginx.tmpl file from @jwilder's nginx-proxy project so that docker-gen can do its thing.

This should be re-run whenever you docker-compose pull to update.

curl https://raw.githubusercontent.com/jwilder/nginx-proxy/master/nginx.tmpl > nginx.tmpl

You can use it as-is for a local development environment, or create a docker-compose.override.yml file, overriding the following variables with your own values (or edit the variables in the main docker-compose.yml file):

version: '3.1'

services:
  ghost:
    container_name: deionarra
    environment:
      url: https://example.com
      VIRTUAL_HOST: example.com
      LETSENCRYPT_HOST: example.com
      LETSENCRYPT_EMAIL: [email protected]
      database__connection__password: makeitstrong
  db:
    container_name: mimir
    environment:
      MYSQL_ROOT_PASSWORD: makeitstrong

The web proxy which handles automatic Let's Encrypt certificate renewal is configured using environment variables in the .env file. Copy/rename .env.sample to .env and adjust the following variables to your heart's content:

# Project name
COMPOSE_PROJECT_NAME=deionarra

# Container names
CONTAINER_NGINX=nginx
CONTAINER_DOCKERGEN=docker-gen
CONTAINER_LETSENCRYPT=letsencrypt-nginx-proxy-companion

# Volumes
NGINX_FILES_PATH=./nginx-data

# Switch Let's Encrypt from the staging to its live API
# ACME_CA_URI=https://acme-v01.api.letsencrypt.org/directory

To install and run Ghost on your server, you can then simply execute:

docker-compose up -d

Updating

Updating Ghost (and the DBMS) should be as simple as running

docker-compose pull

Remember to download the latest version of the nginx-proxy template after every update.

curl https://raw.githubusercontent.com/jwilder/nginx-proxy/master/nginx.tmpl > nginx.tmpl

After both commands have been executed, you can re-up the project:

docker-compose up -d

(Ghost CLI does not work with this setup, but Docker seems to keep the Ghost image updated. The latest version is usually available as an image within a day of Ghost releasing it.)

Lessons

1. Docker's MySQL and MariaDB containers do not like sharing a volume with Ghost, so I just have Compose create two volumes. It's probably better this way.

2. You can simply change the image of the db service from mysql to mariadb and everything appears to keep working, even if there is an existing database.

3. The value of database__connection__host can be either the name of the service (db), or the name of the image (mimir).

4. The nginx image does not handle named volumes well when running on an actual domain (as opposed to localhost).

Further down the rabbit hole

Deionarra — Torment Wiki

Acknowledgements

This project builds on the good work of several others before it, including:

• Web Proxy using Docker, NGINX and Let's Encrypt by @evertramos

Which, in turn, builds on:

• nginx-proxy and docker-gen by @jwilder
• docker-letsencrypt-nginx-proxy-companion by @JrCs

The very early work of Adrian Perez using a similar approach, but with named volumes, deserves an honourable mention.