docker: added config/metrics/debug options
This commit is contained in:
@@ -35,9 +35,13 @@ COPY --from=build /go/bin/go-away /bin/go-away
|
|||||||
|
|
||||||
ENV TZ UTC
|
ENV TZ UTC
|
||||||
|
|
||||||
|
ENV GOAWAY_METRICS_BIND=""
|
||||||
|
ENV GOAWAY_DEBUG_BIND=""
|
||||||
|
|
||||||
ENV GOAWAY_BIND=":8080"
|
ENV GOAWAY_BIND=":8080"
|
||||||
ENV GOAWAY_BIND_NETWORK="tcp"
|
ENV GOAWAY_BIND_NETWORK="tcp"
|
||||||
ENV GOAWAY_SOCKET_MODE="0770"
|
ENV GOAWAY_SOCKET_MODE="0770"
|
||||||
|
ENV GOAWAY_CONFIG=""
|
||||||
ENV GOAWAY_POLICY="/policy.yml"
|
ENV GOAWAY_POLICY="/policy.yml"
|
||||||
ENV GOAWAY_POLICY_SNIPPETS="/policy/snippets"
|
ENV GOAWAY_POLICY_SNIPPETS="/policy/snippets"
|
||||||
ENV GOAWAY_CHALLENGE_TEMPLATE="anubis"
|
ENV GOAWAY_CHALLENGE_TEMPLATE="anubis"
|
||||||
@@ -50,12 +54,17 @@ ENV GOAWAY_BACKEND=""
|
|||||||
ENV GOAWAY_ACME_AUTOCERT=""
|
ENV GOAWAY_ACME_AUTOCERT=""
|
||||||
ENV GOAWAY_CACHE="/cache"
|
ENV GOAWAY_CACHE="/cache"
|
||||||
|
|
||||||
|
|
||||||
EXPOSE 8080/tcp
|
EXPOSE 8080/tcp
|
||||||
EXPOSE 8080/udp
|
EXPOSE 8080/udp
|
||||||
|
EXPOSE 9090/tcp
|
||||||
|
EXPOSE 6060/tcp
|
||||||
|
|
||||||
ENV JWT_PRIVATE_KEY_SEED="${GOAWAY_JWT_PRIVATE_KEY_SEED}"
|
ENV JWT_PRIVATE_KEY_SEED="${GOAWAY_JWT_PRIVATE_KEY_SEED}"
|
||||||
|
|
||||||
ENTRYPOINT /bin/go-away --bind "${GOAWAY_BIND}" --bind-network "${GOAWAY_BIND_NETWORK}" --socket-mode "${GOAWAY_SOCKET_MODE}" \
|
ENTRYPOINT /bin/go-away --bind "${GOAWAY_BIND}" --bind-network "${GOAWAY_BIND_NETWORK}" --socket-mode "${GOAWAY_SOCKET_MODE}" \
|
||||||
|
--metrics-bind "${GOAWAY_METRICS_BIND}" --debug-bind "${GOAWAY_DEBUG_BIND}" \
|
||||||
|
--config "${GOAWAY_CONFIG}" \
|
||||||
--policy "${GOAWAY_POLICY}" --policy-snippets "${GOAWAY_POLICY_SNIPPETS}" \
|
--policy "${GOAWAY_POLICY}" --policy-snippets "${GOAWAY_POLICY_SNIPPETS}" \
|
||||||
--client-ip-header "${GOAWAY_CLIENT_IP_HEADER}" --backend-ip-header "${GOAWAY_BACKEND_IP_HEADER}" \
|
--client-ip-header "${GOAWAY_CLIENT_IP_HEADER}" --backend-ip-header "${GOAWAY_BACKEND_IP_HEADER}" \
|
||||||
--cache "${GOAWAY_CACHE}" \
|
--cache "${GOAWAY_CACHE}" \
|
||||||
|
|||||||
@@ -374,6 +374,11 @@ services:
|
|||||||
#GOAWAY_BIND_NETWORK: "tcp"
|
#GOAWAY_BIND_NETWORK: "tcp"
|
||||||
#GOAWAY_SOCKET_MODE: "0770"
|
#GOAWAY_SOCKET_MODE: "0770"
|
||||||
|
|
||||||
|
# Enable Prometheus metrics under /metrics on this bind
|
||||||
|
#GOAWAY_METRICS_BIND: ":9090"
|
||||||
|
# Enable Go debug profiles under this bind
|
||||||
|
#GOAWAY_DEBUG_BIND: ":6060"
|
||||||
|
|
||||||
# set to letsencrypt or other directory URL to enable HTTPS. Above ports will be TLS only.
|
# set to letsencrypt or other directory URL to enable HTTPS. Above ports will be TLS only.
|
||||||
# enables request JA3N / JA4 client TLS fingerprinting
|
# enables request JA3N / JA4 client TLS fingerprinting
|
||||||
# TLS fingerprints are served on X-TLS-Fingerprint-JA3N and X-TLS-Fingerprint-JA4 headers
|
# TLS fingerprints are served on X-TLS-Fingerprint-JA3N and X-TLS-Fingerprint-JA4 headers
|
||||||
@@ -401,6 +406,10 @@ services:
|
|||||||
# If left empty, the header on GOAWAY_CLIENT_IP_HEADER will be left as-is
|
# If left empty, the header on GOAWAY_CLIENT_IP_HEADER will be left as-is
|
||||||
#GOAWAY_BACKEND_IP_HEADER: ""
|
#GOAWAY_BACKEND_IP_HEADER: ""
|
||||||
|
|
||||||
|
# Alternate way of specifying parameters or more advanced settings
|
||||||
|
# Pass path to YAML file
|
||||||
|
#GOAWAY_CONFIG: ""
|
||||||
|
|
||||||
GOAWAY_POLICY: "/policy.yml"
|
GOAWAY_POLICY: "/policy.yml"
|
||||||
|
|
||||||
GOAWAY_POLICY_SNIPPETS: "/policy/snippets"
|
GOAWAY_POLICY_SNIPPETS: "/policy/snippets"
|
||||||
|
|||||||
Reference in New Issue
Block a user