- Debian 12
- Root access
- Edit and run
install.sh
on remote machine - Upload certificate files in combo form
cert chain + key
in one file to/etc/ssl/private/
- Run on remote machine
find /etc/ssl/private/ -name *combo > /etc/ssl/private/list.txt
to generate certificate list - Locally, edit
haproxy-generator/main.go
with your services - Run
go run haproxy-generator/main.go
to generate 3 files.haproxy.cfg
,docker-compose.yml
, andupdate.sh
- Upload
haproxy.cfg
to/etc/haproxy/haproxy.cfg
- Upload
docker-compose.yml
andupdate.sh
to home directory (/root
) - Upload
docker-compose-systemd.service
to/etc/systemd/system/docker-compose-systemd.service
- Run
systemctl daemon-reload
to pick up the new file/etc/systemd/system/docker-compose-systemd.service
- Run
systemctl enable haproxy
to start it at boot. - Run
systemctl enable docker-compose-systemd
to start podman compose at boot. - Build and save your service container images to tar files (see below)
- Upload your service name tar files to home directory (
/root
) - Run
./update.sh
to import the container and restart services (see that script for details)
# Build
podman build -t myservice:latest .;
# Export
podman save -o myservice.tar localhost/myservice:latest;
# Upload
scp myservice.tar root@[IP_OR_HOST_HERE]:;
# Import
ssh root@[IP_OR_HOST_HERE] "./update.sh";