techbeatly / docker-tools

Docker tools for developer productivity & entertainment

Practical Docker Tools

Kubernetes is hard--or is it? This repo is a collection of images and container resource definitions for managing a software-dev organization using Kubernetes with tools to make it easier. Contents:

Directory	Description
ansible	build your own cluster (Kubernetes or Swarm)
images	images which are published to Docker Hub
k8s	container resources in kubernetes yaml format
lib/build	build makefile and tools
services	non-clustered docker-compose services
ssl	PKI certificate tools (deprecated by k8s)
stacks	container resources in docker-compose format

Find images at docker hub/instantlinux. Find a lot more details about the Kubernetes bare-metal installer in k8s/README.

Kubernetes capabilities

The cluster-deployment tools here include ansible playbooks to spin up bare-metal or VM master/worker nodes, and a Makefile to add several additional features.

• Pod security policies
• Direct-attached SSD local storage pools
• Dashboard
• Non-default namespace with its own service account (full permissions within namespace, limited read-only in kube-system namespaces)
• Helm with tiller
• Mozilla sops with encryption (to keep credentials in local git repo)
• Encryption for internal etcd
• MFA using Authelia and Google Authenticator
• Calico or flannel networking
• ingress-nginx
• Local-volume sync
• Automatic certificate issuing/renewal with Letsencrypt

Resource definitions

Developer infrastructure

Service	Version	Notes
artifactory	**	binary repo
gitlab	**	CI server and git repo
admin-git		sync git repo across swarm
jenkins		CI server
jira	**	ticket tracking
mariadb-galera		automatic cluster setup
nexus	**	binary repo with docker registry
wordpress	**

Networking and support

Service	Version	Notes
authelia	**	single-signon multi-factor auth
cloud	**	nextcloud, private sync like Apple iCloud
docs		OX Appsuite, private cloud like Google Docs
data-sync		poor-man's SAN for persistent storage
duplicati		backups
ez-ipupdate		Dynamic DNS client
haproxy-keepalived		load balancer
guacamole	**	authenticated remote-desktop server
logspout	**	central logging for Docker
mysqldump		per-database alternative to xtrabackup
nagiosql		NagiosQL with Nagios Core v4 for monitoring
nut-upsd		Network UPS Tools
rsyslogd	**	logger in a 13MB image
samba		file server
samba-dc		Active-Directory compatible domain controller
secondshot		rsnapshot-based backups
splunk	**	the free version
vsftpd		ftp server

Email

Service	Version	Notes
blacklist		a local rbldnsd for spam control
dovecot		imapd server
postfix		compact general-purpose image in 11MB
postfix-python		postfix with spam-control scripts
rainloop	**	webmail imapd-client server
squirrelmail		older version of Squirrelmail
spamassassin		spam control daemon

Entertainment

Service	Version	Notes
davite		party-invites manager like eVite
mt-daapd		iTunes server
mythtv-backend		MythTV backend
weewx		Weather station software (Davis VantagePro2 etc.)
wxcam-upload		Upload webcam images to Weather Underground

Credits

Thank you to the following contributors!

• Chad Hedstrom - personal site
• Sean Mollet
• Juan Manuel Carrillo Moreno - personal site
• nicxvan

Contents created 2017-19 under Apache 2.0 License by Rich Braun.