This looks really slick.
stevensonmt
maz
Hi, getting this set up and generally got it working. I’m having an issue with keila embedding the port into the Unsubscribe link i.e.:
http://keila.example.com:4040/unsubscribe/p_GX8qGEZd/c_GX8qGEZd
so when the user clicks on it they see:
An error occurred during a connection to keila.example.com:4040. SSL received a record that exceeded the maximum permissible length.
Error code: SSL_ERROR_RX_RECORD_TOO_LONG
I understand that this is an phoenix config setting but I set up using the docker image so I don’t think I can tweak that, or am I wrong? regards,
Michael
0
stefanluptak
Try removing the url: [port: 4040] setting from the Endpoint configuration, if you have it there.
0
maz
Thanks for the tip. Yeah I guess I will just have to build my own docker image with that tweak to the endpoint.
0
wmnnd
The official Keila docker image isn’t set up to handle HTTPS termination - so my recommendation would be to use it behind a reverse proxy like Nginx or Traefik.
0
wmnnd
Ah, I think I misread your question. You can configure the ports for URL generation via environment variables: Configuration - Keila
PORT determines which port Keila listens to and URL_PORT which port is used for URLs. And in case of ports 80 and 443, this is not included in the generated URLs.
0
maz
Thanks! Thanks for Keila too.
Change:
URL_PORT=443
URL_SCHEMA=https
were the changes to the config and the url in the unsubscribe link now looks like:
https://keila.example.com/unsubscribe/p_GX8qGEZd/c_GX8qGEZd
I am using Traefik as a proxy. To help out anyone else who’d like to have keila behind Traefik, here is my docker-compose.yml:
version: "3"
services:
keila:
image: pentacent/keila:latest
ports:
- "4040:4040"
depends_on:
- postgres_keila
build: .
env_file:
- .env
networks:
- db-network
- proxy-network
labels:
- "traefik.enable=true"
- "traefik.port=4040"
- "traefik.http.routers.keila_example-com.entrypoints=http"
- "traefik.http.routers.keila_example-com.rule=Host(`keila.example.com`)"
- "traefik.http.middlewares.keila_example-com-https-redirect.redirectscheme.scheme=https"
- "traefik.http.routers.keila_example-com.middlewares=keila_example-com-https-redirect"
- "traefik.http.routers.keila_example-com-secure.entrypoints=https"
- "traefik.http.routers.keila_example-com-secure.rule=Host(`keila.example.com`)"
- "traefik.http.routers.keila_example-com-secure.tls=true"
- "traefik.http.routers.keila_example-com-secure.tls.certresolver=http"
- "traefik.http.routers.keila_example-com-secure.service=keila_example-com"
- "traefik.http.services.keila_example-com.loadbalancer.server.port=4040"
- "traefik.docker.network=proxy-network"
postgres_keila:
image: postgres:alpine
ports:
- "5432:5432"
environment:
POSTGRES_PASSWORD: postgres
networks:
- db-network
networks:
db-network:
proxy-network:
external: true
0
Exadra37
This also exposes the Keila to the world without the need to go through Traefik, because its equivalent to "0.0.0.0:4040:4040". To be only localhost you need to use instead "127.0.0.1:4040:4040", but if the goal is to only have Traefik talking with Keila then you can just simply remove `“4040:4040”.
Regarding Postgres Database you are also exposing it to the world. To communicate with the database from Keila just use the service name postgres_keila has the host on your code, and remove the ports from your docker compose file.
2
maz
