Expanded cloud example and documentation.

cloud/.env.dist

@@ -1,3 +1,7 @@
+## Set pro options if applicable
+# RUNDECK_IMAGE=rundeckpro/team:SNAPSHOT
+# RUNDECK_LICENSE_FILE=
+
 AWS_CREDENTIALS=
 RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_BUCKET=
 RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_REGION=

cloud/Dockerfile

@@ -1,3 +1,5 @@
+ARG RUNDECK_IMAGE
+
 FROM ${RUNDECK_IMAGE:-rundeck/rundeck:SNAPSHOT}
 
 COPY --chown=rundeck:rundeck ./libext ./libext

cloud/README.md

@@ -4,10 +4,16 @@ This exhibit demonstrates what a typical cloud or multi-server
 deployment may look like.
 
 On display:
+* Running Rundeck behind a reverse proxy
 * Storage backend connected to a database server
 * Execution logs stored in S3
 * Bundling extra plugins
 
+### Reverse proxy
+This configuration exposes rundeck at `http://localhost:80` through nginx.
+A similiar setup is possible behind a cloud provider proxy, such as AWS ELB[v2],
+and the key is the `RUNDECK_SERVER_FORWARDED=true` environment variable which instructs
+Rundeck to respect the standard `X-Forwarded-*` headers.
 
 ## Setup
 **Fetch S3 log plugin**
@@ -18,5 +24,16 @@ wget https://github.com/rundeck-plugins/rundeck-s3-log-plugin/releases/download/
 ```
 
 **Populate `.env` file**
+```bash
+cp .env.dist .env
+vim .env
+```
 
-`docker-compose up`
+**Build and Up**  
+> **NOTE:** Building is not necessary the first time, however
+it will be to use newer or different images after the
+first build.
+```
+docker-compose build
+docker-compose up
+```

cloud/docker-compose.yml

@@ -2,24 +2,36 @@ version: '3'
 
 services:
     rundeck:
-        build: ./
+        build:
+            context: ./
+            args:
+                RUNDECK_IMAGE: ${RUNDECK_IMAGE:-rundeck/rundeck:SNAPSHOT}
         links:
           - mysql
         environment:
+            RUNDECK_GRAILS_URL: http://localhost
+            RUNDECK_SERVER_FORWARDED: 'true'
             RUNDECK_DATABASE_DRIVER: com.mysql.jdbc.Driver
             RUNDECK_DATABASE_USERNAME: rundeck
             RUNDECK_DATABASE_PASSWORD: rundeck
             RUNDECK_DATABASE_URL: jdbc:mysql://mysql/rundeck?autoReconnect=true&useSSL=false
-            RUNDECK_PLUGIN_EXECUTIONFILESTORAGE: org.rundeck.amazon-s3
+            RUNDECK_PLUGIN_EXECUTIONFILESTORAGE: com.rundeck.rundeckpro.amazon-s3
             RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_BUCKET: ${RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_BUCKET}
             RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_REGION: ${RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_REGION}
             RUNDECK_STORAGE_CONVERTER_1_CONFIG_PASSWORD: ${RUNDECK_STORAGE_PASSWORD}
             RUNDECK_CONFIG_STORAGE_CONVERTER_1_CONFIG_PASSWORD: ${RUNDECK_STORAGE_PASSWORD}
         volumes:
           - data:/home/rundeck/server/data
           - ${AWS_CREDENTIALS}:/home/rundeck/.aws/credentials
+          - ${RUNDECK_LICENSE_FILE:-/dev/null}:/home/rundeck/etc/rundeckpro-license.key
+    nginx:
+        image: nginx
+        links:
+          - rundeck
+        volumes:
+          - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
         ports:
-          - 4440:4440
+          - 80:80
     mysql:
         image: mysql:5.7
         expose:

cloud/nginx/nginx.conf

@@ -0,0 +1,17 @@
+events {
+  worker_connections  1024;
+}
+
+http {
+    server {
+        location / {
+            proxy_pass http://rundeck:4440;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Host $host:$server_port;
+            proxy_set_header X-Forwarded-Server $host;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header User-Agent $http_user_agent;
+        }
+    }
+}