refactor(pgs): use redis for central tls cert storage

Commit `7cdb912`

Eric Bower · 2026-08-30 21:00:02 -0400 EDT

parent f14e309

refactor(pgs): use redis for central tls cert storage

4 files changed, +28, -5

M caddy/Caddyfile.pgs

M caddy/Dockerfile

M docker-compose.prod.yml

M docker-compose.yml

M caddy/Caddyfile.pgs

+6, -3

......@@ -1,7 +1,10 @@
{
	# storage postgres {
	# 	connection_string {$DATABASE_URL}
	# }
	storage redis {
		address {$REDIS_ADDR}
		password {$REDIS_PASSWORD}
		timeout 5
		key_prefix "caddy"
	}
	on_demand_tls {
		ask http://web:3000/check
	}

M caddy/Dockerfile

+1, -1

......@@ -9,7 +9,7 @@ ENV GOOS=${TARGETOS} GOARCH=${TARGETARCH}

RUN xcaddy build \
    --with github.com/caddy-dns/cloudflare \
    --with github.com/yroc92/postgres-storage
    --with github.com/pberkel/caddy-storage-redis

FROM caddy:alpine

M docker-compose.prod.yml

+15, -1

......@@ -7,6 +7,19 @@ services:
    ports:
      - "5432:5432"
    command: -N 1024 -B 4096MB
  redis:
    image: redis:7-alpine
    restart: always
    env_file:
      - .env.prod
    volumes:
      - ./data/redis-data:/data
    ports:
      - "6379:6379"
    command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
    networks:
      - default
      - pgs
  pipemgr:
    env_file:
      - .env.prod

......@@ -194,7 +207,8 @@ services:
    environment:
      APP_DOMAIN: ${PGS_DOMAIN:-pgs.sh}
      APP_EMAIL: ${PGS_EMAIL:-hello@pico.sh}
      DATABASE_URL: ${DATABASE_URL}
      REDIS_ADDR: ${REDIS_ADDR:-redis:6379}
      REDIS_PASSWORD: ${REDIS_PASSWORD}
    volumes:
      - ${PGS_CADDYFILE}:/etc/caddy/Caddyfile
      - ./data/pgs-caddy/data:/data

M docker-compose.yml

+6, -0

......@@ -5,6 +5,12 @@ services:
    profiles:
      - db
      - all
  redis:
    image: redis:7-alpine
    restart: always
    profiles:
      - db
      - all
  imgproxy:
    image: darthsim/imgproxy:latest
    restart: always

...	...		@@ -1,7 +1,10 @@
1	1		{
2		-	# storage postgres {
3		-	# connection_string {$DATABASE_URL}
4		-	# }
	2	+	storage redis {
	3	+	address {$REDIS_ADDR}
	4	+	password {$REDIS_PASSWORD}
	5	+	timeout 5
	6	+	key_prefix "caddy"
	7	+	}
5	8		on_demand_tls {
6	9		ask http://web:3000/check
7	10		}

...	...		@@ -9,7 +9,7 @@ ENV GOOS=${TARGETOS} GOARCH=${TARGETARCH}
9	9
10	10		RUN xcaddy build \
11	11		--with github.com/caddy-dns/cloudflare \
12		-	--with github.com/yroc92/postgres-storage
	12	+	--with github.com/pberkel/caddy-storage-redis
13	13
14	14		FROM caddy:alpine
15	15

...	...		@@ -7,6 +7,19 @@ services:
7	7		ports:
8	8		- "5432:5432"
9	9		command: -N 1024 -B 4096MB
	10	+	redis:
	11	+	image: redis:7-alpine
	12	+	restart: always
	13	+	env_file:
	14	+	- .env.prod
	15	+	volumes:
	16	+	- ./data/redis-data:/data
	17	+	ports:
	18	+	- "6379:6379"
	19	+	command: redis-server --appendonly yes --requirepass ${REDIS_PASSWORD}
	20	+	networks:
	21	+	- default
	22	+	- pgs
10	23		pipemgr:
11	24		env_file:
12	25		- .env.prod

...	...		@@ -194,7 +207,8 @@ services:
194	207		environment:
195	208		APP_DOMAIN: ${PGS_DOMAIN:-pgs.sh}
196	209		APP_EMAIL: ${PGS_EMAIL:-hello@pico.sh}
197		-	DATABASE_URL: ${DATABASE_URL}
	210	+	REDIS_ADDR: ${REDIS_ADDR:-redis:6379}
	211	+	REDIS_PASSWORD: ${REDIS_PASSWORD}
198	212		volumes:
199	213		- ${PGS_CADDYFILE}:/etc/caddy/Caddyfile
200	214		- ./data/pgs-caddy/data:/data

...	...		@@ -5,6 +5,12 @@ services:
5	5		profiles:
6	6		- db
7	7		- all
	8	+	redis:
	9	+	image: redis:7-alpine
	10	+	restart: always
	11	+	profiles:
	12	+	- db
	13	+	- all
8	14		imgproxy:
9	15		image: darthsim/imgproxy:latest
10	16		restart: always

Commit 7cdb912

Commit `7cdb912`