aborroy / acs-proxy

An enhanced Web Proxy container for ACS Community deployment.

ACS Community Nginx Proxy

An enhanced Web Proxy container for ACS Community deployment.

Environment variables

Name	Default	Description
REPO_URL	http://alfresco:8080	Repository URL inside network.
SHARE_URL	http://share:8080	Share URL inside network.
ACA_URL	http://content-app:8080	Alfresco Content Application URL inside network.
SOLR_URL	http://solr6:8983	SOLR URL inside network.
ACCESS_LOG	n/a	Set the access_log value. Set to off to switch off logging.
PORT	8080	External port number for the Web Proxy
PROTOCOL	http	External protocol for the Web Proxy: http or https
ACA_ENABLED	true	Configure Web Proxy for Alfresco Content Application in context / when true
ALFRESCO_ENABLED	true	Configure Web Proxy for Repository in context /alfresco when true
API_EXPLORER_ENABLED	true	Configure Web Proxy for Repository in context /api-explorer when true
SHARE_ENABLED	true	Configure Web Proxy for Share in context /share when true
SOLR_ENABLED	true	Configure Web Proxy for SOLR in context /solr when true, protected by user/password
SOLR_PROTECT	true	Disable the access to Repository SOLR REST APIs when true, so they cannot be accessed using the Web Proxy

Examples

Development environment only with alfresco and solr services. SOLR Web Console protected by user / password in nginx.htpasswd file. Repository SOLR REST APIs open to be used from Web Proxy.

proxy:
    image: angelborroy/acs-proxy:1.0.0
    environment:
      - ACA_ENABLED=false
      - SHARE_ENABLED=false
      - SOLR_PROTECT=false
    depends_on:
        - alfresco
        - solr6
    volumes:
        - ./config/nginx.htpasswd:/etc/nginx/conf.d/nginx.htpasswd
    ports:
        - 8080:8080
    links:
        - alfresco
        - solr6

SSL Environment without Alfresco Content Application.

proxy:
    image: angelborroy/acs-proxy:1.0.0
    mem_limit: 128m
    environment:
      - ACA_ENABLED=false
      - PORT=443
      - PROTOCOL=https
    depends_on:
        - alfresco
    volumes:
        - ./config/nginx.htpasswd:/etc/nginx/conf.d/nginx.htpasswd
        - ./config/cert/localhost.cer:/etc/nginx/localhost.cer
        - ./config/cert/localhost.key:/etc/nginx/localhost.key
    ports:
        - 443:443
    links:
        - alfresco
        - share
        - solr6

acs-proxy's Issues

Api Explorer missing

The /api-explorer url is missing. Will apply a PR in a bit.

Default nginx.htpasswd admin password misleading?

Hej hej,

what password is the default nginx.htpasswd providing?

Because I found it may be misleading to use YWG41BPzVAkN6 from nginx.htpasswd

After I missed to log in (mentioned in Alfresco/alfresco-docker-installer#74 (comment)) with password admin e.g. to my custom site https://custom-server-name.org/solr and other passwords that I tried, I found it has to be generated by htpasswd (see Restricting Access with HTTP Basic Authentication; docs.nginx.com):

htpasswd /path/to/nginx.htpasswd whateverusername

So if the default password shall be YWG41BPzVAkN6, then nginx.htpasswd should contain e.g:

admin:$apr1$Nqdhv8hR$gEsnbvQXzZKM6stsIoYFz1

… or if the password shall be admin then e.g:

admin:$apr1$94LKbA3l$fawCs80fVfXNG.IMlazEl1

Right? After grasping and setting it, I could log in as expected to https://custom-server-name.org/solr web console ;-)

Bump nginx version to 1.20.1

Bundled nginx version is 1.18.0.

Please bump to 1.20.1 due to nginx security advisory (CVE-2021-23017).