nite/custom-dockerfile
1
0
Fork 0
Code Issues Pull Requests Actions Activity

🔧 Modify Dockerfile

Browse Source
This commit is contained in:
Nite07 2024-05-07 13:52:58 +08:00
parent 2f85ef7c96
commit 700d685d77
2 changed files with 12 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Dockerfile
View File

@ -14,18 +14,22 @@ ENV DERP_HOSTNAME example.com
ENV DERP_CERTMODE letsencrypt ENV DERP_CERTMODE letsencrypt
ENV DERP_ADDR :443 ENV DERP_ADDR :443
ENV DERP_VERIFY_CLIENTS false ENV DERP_VERIFY_CLIENTS false
ENV DERP_HTTP_PORT 80
ENV DERP_STUN_ENABLE true
ENV DERP_STUN_PORT 3478
COPY --from=builder /go/bin/derper . COPY --from=builder /go/bin/derper .
EXPOSE 80 443 3478
VOLUME ["/app/certs"] VOLUME ["/app/certs"]
CMD /app/derper --hostname=$DERP_HOSTNAME \ CMD /app/derper --hostname=$DERP_HOSTNAME \
--a=$DERP_ADDR \ --a=$DERP_ADDR \
--certdir=/app/certs \ --certdir=/app/certs \
--verify-clients=$DERP_VERIFY_CLIENTS \ --verify-clients=$DERP_VERIFY_CLIENTS \
--certmode=$DERP_CERTMODE --certmode=$DERP_CERTMODE \
--http-port=$DERP_HTTP_PORT \
--stun=$DERP_STUN_ENABLE \
--stun-port=$DERP_STUN_PORT
# derper --help # derper --help
# 使用方法说明: # 使用方法说明:

23
README.md
View File

@ -6,6 +6,9 @@
| DERP_CERTMODE | Determines the SSL/TLS certificate management mode. Options: `manual`, `letsencrypt` | `letsencrypt` | | DERP_CERTMODE | Determines the SSL/TLS certificate management mode. Options: `manual`, `letsencrypt` | `letsencrypt` |
| DERP_ADDR | Sets the server address and port to bind to. | `:443` | | DERP_ADDR | Sets the server address and port to bind to. | `:443` |
| DERP_VERIFY_CLIENTS | Whether to verify clients connecting to the DERP server. [reference](https://tailscale.com/kb/1118/custom-derp-servers#optional-restricting-client-access-to-your-derp-node) | `false` | | DERP_VERIFY_CLIENTS | Whether to verify clients connecting to the DERP server. [reference](https://tailscale.com/kb/1118/custom-derp-servers#optional-restricting-client-access-to-your-derp-node) | `false` |
| DERP_HTTP_PORT | Sets the port for the HTTP server. | `80` |
| DERP_STUN_ENABLE | Whether to enable STUN. | `true` |
| DERP_STUN_PORT | Sets the port for the STUN server. | `3478` |
# Volumes # Volumes
@ -15,27 +18,11 @@
# Usage # Usage
## Running Directly with SSL/TLS
```shell ```shell
docker run -d --name derper \ docker run -d --name derper \
-p 443:443 -p 3478:3478 \ -p 80:80 -p 443:443 -p 3478:3478 \
-e DERP_DOMAIN=example.com \ -e DERP_DOMAIN=example.com \
-e DERP_CERTMODE=manual \
-v /path/to/certs:/app/certs \
nite07/tailscale-derp-docker:latest nite07/tailscale-derp-docker:latest
``` ```
## Running Behind a Reverse Proxy [Adding DERP servers to your tailnet](https://tailscale.com/kb/1118/custom-derp-servers#step-2-adding-derp-servers-to-your-tailnet)
```shell
docker run -d --name derper \
-p 8080:80 -p 3478:3478 \
-e DERP_DOMAIN=example.com \
-e DERP_ADDR=:80 \
nite07/tailscale-derp-docker:latest
```
## Adding DERP servers to your tailnet
[reference](https://tailscale.com/kb/1118/custom-derp-servers#step-2-adding-derp-servers-to-your-tailnet)