|
@@ -56,7 +56,7 @@
|
|
|
<link rel="author" title="About these documents" href="about.html" />
|
|
|
<link rel="index" title="Index" href="genindex.html" />
|
|
|
<link rel="search" title="Search" href="search.html" />
|
|
|
- <link rel="next" title="Client Installation" href="client-installation.html" />
|
|
|
+ <link rel="next" title="Introduction" href="oauth.html" />
|
|
|
<link rel="prev" title="Install with Nginx (depreciated)" href="quick-start-nginx.html" />
|
|
|
|
|
|
|
|
@@ -448,6 +448,8 @@
|
|
|
<ul class="md-nav__list">
|
|
|
<li class="md-nav__item"><a href="#test-install-no-dns-no-secure-grpc" class="md-nav__link">Test Install - No DNS, No Secure GRPC</a>
|
|
|
</li>
|
|
|
+ <li class="md-nav__item"><a href="#traefik-proxy" class="md-nav__link">Traefik Proxy</a>
|
|
|
+ </li>
|
|
|
<li class="md-nav__item"><a href="#no-dns-coredns-disabled" class="md-nav__link">No DNS - CoreDNS Disabled</a>
|
|
|
</li></ul>
|
|
|
</nav>
|
|
@@ -573,6 +575,34 @@
|
|
|
|
|
|
</li></ul>
|
|
|
|
|
|
+ </li>
|
|
|
+ <li class="md-nav__item">
|
|
|
+
|
|
|
+
|
|
|
+ <a href="oauth.html" class="md-nav__link">Introduction</a>
|
|
|
+
|
|
|
+
|
|
|
+ </li>
|
|
|
+ <li class="md-nav__item">
|
|
|
+
|
|
|
+
|
|
|
+ <a href="oauth.html#configuring-your-provider" class="md-nav__link">Configuring your provider</a>
|
|
|
+
|
|
|
+
|
|
|
+ </li>
|
|
|
+ <li class="md-nav__item">
|
|
|
+
|
|
|
+
|
|
|
+ <a href="oauth.html#configuring-netmaker" class="md-nav__link">Configuring Netmaker</a>
|
|
|
+
|
|
|
+
|
|
|
+ </li>
|
|
|
+ <li class="md-nav__item">
|
|
|
+
|
|
|
+
|
|
|
+ <a href="oauth.html#configuring-user-permissions" class="md-nav__link">Configuring User Permissions</a>
|
|
|
+
|
|
|
+
|
|
|
</li>
|
|
|
<li class="md-nav__item">
|
|
|
|
|
@@ -867,6 +897,8 @@
|
|
|
<ul class="md-nav__list">
|
|
|
<li class="md-nav__item"><a href="#test-install-no-dns-no-secure-grpc" class="md-nav__link">Test Install - No DNS, No Secure GRPC</a>
|
|
|
</li>
|
|
|
+ <li class="md-nav__item"><a href="#traefik-proxy" class="md-nav__link">Traefik Proxy</a>
|
|
|
+ </li>
|
|
|
<li class="md-nav__item"><a href="#no-dns-coredns-disabled" class="md-nav__link">No DNS - CoreDNS Disabled</a>
|
|
|
</li></ul>
|
|
|
</nav>
|
|
@@ -1059,7 +1091,7 @@
|
|
|
<span class="nt">container_name</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">netmaker</span>
|
|
|
<span class="nt">depends_on</span><span class="p">:</span>
|
|
|
<span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">rqlite</span>
|
|
|
- <span class="nt">image</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">gravitl/netmaker:v0.8.4</span>
|
|
|
+ <span class="nt">image</span><span class="p">:</span> <span class="l l-Scalar l-Scalar-Plain">gravitl/netmaker:v0.8.5</span>
|
|
|
<span class="nt">volumes</span><span class="p">:</span> <span class="c1"># Volume mounts necessary for CLIENT_MODE to control wireguard networking on host (except dnsconfig, which is where dns config files are stored for use by CoreDNS)</span>
|
|
|
<span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">dnsconfig:/root/config/dnsconfig</span> <span class="c1"># Netmaker writes Corefile to this location, which gets mounted by CoreDNS for DNS configuration.</span>
|
|
|
<span class="p p-Indicator">-</span> <span class="l l-Scalar l-Scalar-Plain">/usr/bin/wg:/usr/bin/wg</span>
|
|
@@ -1116,7 +1148,8 @@
|
|
|
|
|
|
<h2 id="dns-mode-setup">DNS Mode Setup<a class="headerlink" href="#dns-mode-setup" title="Permalink to this headline">¶</a></h2>
|
|
|
<p>If you plan on running the server in DNS Mode, know that a <a class="reference external" href="https://coredns.io/manual/toc/">CoreDNS Server</a> will be installed. CoreDNS is a light-weight, fast, and easy-to-configure DNS server. It is recommended to bind CoreDNS to port 53 of the host system, and it will do so by default. The clients will expect the nameserver to be on port 53, and many systems have issues resolving a different port.</p>
|
|
|
-<p>However, on your host system (for Netmaker), this may conflict with an existing process. On linux systems running systemd-resolved, there is likely a service consuming port 53. The below steps will disable systemd-resolved, and replace it with a generic (e.g. Google) nameserver. Be warned that this may have consequences for any existing private DNS configuration. The following was tested on Ubuntu 20.04 and should be run prior to deploying the docker containers.</p>
|
|
|
+<p>However, on your host system (for Netmaker), this may conflict with an existing process. On linux systems running systemd-resolved, there is likely a service consuming port 53. The below steps will disable systemd-resolved, and replace it with a generic (e.g. Google) nameserver. Be warned that this may have consequences for any existing private DNS configuration.</p>
|
|
|
+<p>With the latest docker-compose, it is not necessary to perform these steps. But if you are running the install and find that port 53 is blocked, you can perform the following steps, which were tested on Ubuntu 20.04 (these should be run prior to deploying the docker containers).</p>
|
|
|
<div class="highlight-default notranslate"><div class="highlight"><pre><span></span><span class="n">systemctl</span> <span class="n">stop</span> <span class="n">systemd</span><span class="o">-</span><span class="n">resolved</span>
|
|
|
<span class="n">systemctl</span> <span class="n">disable</span> <span class="n">systemd</span><span class="o">-</span><span class="n">resolved</span>
|
|
|
<span class="n">vim</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">systemd</span><span class="o">/</span><span class="n">resolved</span><span class="o">.</span><span class="n">conf</span>
|
|
@@ -1152,6 +1185,10 @@ docker-compose up -d`
|
|
|
</div>
|
|
|
|
|
|
|
|
|
+<h3 id="traefik-proxy">Traefik Proxy<a class="headerlink" href="#traefik-proxy" title="Permalink to this headline">¶</a></h3>
|
|
|
+<p>To install with Traefik, rather than Nginx or the default Caddy, check out this repo: <a class="reference external" href="https://github.com/bsherman/netmaker-traefik">https://github.com/bsherman/netmaker-traefik</a></p>
|
|
|
+
|
|
|
+
|
|
|
<h3 id="no-dns-coredns-disabled">No DNS - CoreDNS Disabled<a class="headerlink" href="#no-dns-coredns-disabled" title="Permalink to this headline">¶</a></h3>
|
|
|
<p>DNS Mode is currently limited to clients that can run resolvectl (systemd-resolved, see <a class="reference internal" href="architecture.html"><span class="doc">Architecture docs</span></a> for more info). You may wish to disable DNS mode for various reasons. This installation option gives you the full feature set minus CoreDNS.</p>
|
|
|
<p>To run without DNS, follow the <a class="reference internal" href="quick-start.html"><span class="doc">Quick Install</span></a> guide, omitting the steps for DNS setup. In addition, when the guide has you pull (wget) the Netmaker docker-compose template, use the following link instead:</p>
|
|
@@ -1480,12 +1517,12 @@ This install has some notable exceptions:
|
|
|
</a>
|
|
|
|
|
|
|
|
|
- <a href="client-installation.html" title="Client Installation"
|
|
|
+ <a href="oauth.html" title="Introduction"
|
|
|
class="md-flex md-footer-nav__link md-footer-nav__link--next"
|
|
|
rel="next">
|
|
|
<div class="md-flex__cell md-flex__cell--stretch md-footer-nav__title"><span
|
|
|
class="md-flex__ellipsis"> <span
|
|
|
- class="md-footer-nav__direction"> Next </span> Client Installation </span>
|
|
|
+ class="md-footer-nav__direction"> Next </span> Introduction </span>
|
|
|
</div>
|
|
|
<div class="md-flex__cell md-flex__cell--shrink"><i
|
|
|
class="md-icon md-icon--arrow-forward md-footer-nav__button"></i>
|