This commit is contained in:
Vassiliy Yegorov
2022-08-25 14:10:23 +07:00
parent 1e6377dc46
commit 5cc8cd3321
2 changed files with 4 additions and 22 deletions

View File

@@ -12,9 +12,9 @@ vault secrets enable -path=psql database
vault write psql/config/test-psql \ vault write psql/config/test-psql \
plugin_name=postgresql-database-plugin \ plugin_name=postgresql-database-plugin \
allowed_roles="db1-role" \ allowed_roles="db1-role" \
connection_url="postgresql://{{username}}:{{password}}@psql:5432/postgres?sslmode=disable" \ connection_url="postgresql://{{username}}:{{password}}@psql:5432/testdb1?sslmode=disable" \
username="testuser" \ username="testuser" \
password="passw0rd" password="password"
``` ```
2. добавляем роль 2. добавляем роль

View File

@@ -6,7 +6,8 @@ services:
restart: always restart: always
environment: environment:
POSTGRES_USER: testuser POSTGRES_USER: testuser
POSTGRES_PASSWORD: passw0rd POSTGRES_PASSWORD: password
POSTGRES_DB: testdb1
volumes: volumes:
- pgdata:/var/lib/postgresql/data - pgdata:/var/lib/postgresql/data
expose: expose:
@@ -14,28 +15,9 @@ services:
networks: networks:
- vault_net - vault_net
adminer:
image: adminer
container_name: adminer
labels:
- "traefik.enable=true"
- "traefik.http.routers.testdb-adminer.rule=Host(`${VAULT_HOST}`) && Path(`/adminer`)"
- "traefik.http.routers.testdb-adminer.entrypoints=https"
- "traefik.http.routers.testdb-adminer.tls=true"
- "traefik.http.routers.testdb-adminer.tls.certresolver=letsEncrypt"
- "traefik.http.services.testdb-adminer-service.loadbalancer.server.port=8080"
- "traefik.docker.network=webproxy"
expose:
- 8080
networks:
- vault_net
- webproxy
networks: networks:
vault_net: vault_net:
name: vault_net name: vault_net
webproxy:
name: webproxy
volumes: volumes:
pgdata: pgdata: