pacroy/wikijs

标签

• 1.0.3, latest https://github.com/pacroy/wikijs-docker/blob/master/Dockerfile

参考资料

• https://wiki.js.org/
• https://hub.docker.com/r/requarks/wiki/

使用示例

1. 创建新网络

$ docker network create wikijs

2. 创建MongoDB容器

$ docker run -d --name wikijs-mongo --network=wikijs \
  -v wikijs-configdb:/data/configdb \
  -v wikijs-datadb:/data/db \
  mongo

3. 创建SSH密钥

ssh-keygen -t rsa -b 4096 -C “你的注释或邮箱”

打印并复制公钥：

cat ~/.ssh/id_rsa.pub

4. 创建Git仓库

4.1 前往[***]
4.2 将公钥添加到仓库（设置 --> 部署密钥 --> 添加部署密钥）

5. 创建Wikijs容器

$ docker run -d --name wikijs --network=wikijs \
  -e TITLE='Wiki' \
  -e HOST='http://localhost' \
  -e PORT=3000 \
  -e MONGO_HOST=wikijs-mongo \
  -e GIT_URL=git@github.com:你的ID/你的仓库.git \
  -e WIKI_ADMIN_EMAIL=你的邮箱@域名.com \
  -v ~/.ssh:/var/wiki/keys \
  -p 3000:3000 \
  pacroy/wikijs

6. 配置Nginx（可选）

若需将Wikijs置于Nginx反向代理后或启用HTTPS，可进行以下配置：

6.1 创建Nginx容器：docker container run -d -p 80:80 -p 443:443 --name nginx nginx
6.2 将Nginx加入同一网络：docker network connect wikijs nginx
6.3 创建default.conf文件：vim default.conf并输入以下内容

HTTP配置

server {
    listen 80;
    listen [::]:80;
    server_name  wiki.example.com;

    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_pass http://wikijs:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_next_upstream error timeout http_502 http_503 http_504;
    }
}

HTTPS配置

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name  wiki.example.com;

    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:50m;
    ssl_session_tickets off;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
    ssl_prefer_server_ciphers on;

    ssl_certificate /etc/nginx/ssl/fullchain.pem;
    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
    ssl_trusted_certificate /etc/nginx/ssl/chain.pem;

    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_pass http://wikijs:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_next_upstream error timeout http_502 http_503 http_504;
    }
}

若使用HTTPS，需将SSL文件复制到/etc/nginx/ssl目录。

可通过以下命令生成自签名证书：

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 30000 -nodes

参考：[***]