A Docker infrastructure project for 42 School

🇧🇷 Ver em Português

This project is part of the 42 School curriculum and aims to broaden knowledge of system administration using Docker. The goal is to virtualize several Docker images in a personal virtual machine, setting up a small infrastructure composed of different services under specific rules.

The infrastructure implements the following requirements:

• Docker containers for:
  • NGINX with TLSv1.2/TLSv1.3
  • WordPress + php-fpm
  • MariaDB
• Volumes for:
  • WordPress database
  • WordPress website files
• A Docker network to establish connection between containers

                  ┌─────────┐
                  │   WWW   │
                  └────┬────┘
                       │
                   port 443
                       │
                       ▼
┌─────────────────Docker Network──────────────────┐
│                                                 │
│  ┌─────────┐       ┌─────────┐      ┌────────┐  │
│  │  NGINX  │──9000→│WordPress│─3306→│MariaDB │  │
│  └─────────┘       │  +PHP   │      └────┬───┘  │
│       │            └────┬────┘           │      │
│       │                 │                │      │
│       │                 │                │      │
│       ▼                 ▼                ▼      │
│  ┌──────────────────Volumes───────────────────┐ │
│  │                                            │ │
│  │            ┌───────────┐ ┌───────────┐     │ │
│  │            │WordPress  │ │Database   │     │ │
│  │            │  Files    │ │           │     │ │
│  │            └───────────┘ └───────────┘     │ │
│  │                                            │ │
│  └────────────────────────────────────────────┘ │
│                                                 │
└─────────────────────────────────────────────────┘

In addition to the main requirements, the project includes the following bonus features:

• Redis Cache: To improve WordPress performance
• FTP Server: Pointing to the WordPress volume
• Static Website: Developed in Go (not in PHP)
• Adminer: Database management interface
• cAdvisor: Container resource monitoring

Architecture with Bonus Features:

%%{ init: { 'graph': { 'curve': 'monotoneX' } } }%%
graph TD
    Web(((WWW)))
    subgraph HOST
        subgraph Docker Network
            C1(MariaDB)
            C2(WordPress+PHP)
            C3(NGINX)
            C4(FTP)
            C5(Adminer)
            C6(Website)
            C7(Cadvisor)
            C8(Redis)
        end
        subgraph Filesystem
            DB[(Database)]
            WP[(WordPress)]
        end
    end

Web -. 21 .- C4
Web -. 443 .- C3
C3 -. 9000 .- C2
C3 -. 8080 .- C6
C3 -. 8080 .- C7
C3 -. 8081 .- C5
C2 -. 3306 .- C1
C2 -. 6379 .- C8
C1 --> DB
C2 & C4 --> WP

style Web fill:#4F81BD,stroke:#1B4F72,stroke-width:2px

• Docker and Docker Compose: Container virtualization and orchestration
• Alpine/Debian: Base images for containers
• NGINX: Web server with HTTPS support
• MariaDB: Database management system
• WordPress and PHP-FPM: CMS and PHP processor
• Redis: In-memory cache system
• Go: Language for the static website
• VSFTPD: FTP server
• Adminer: Web-based database manager
• cAdvisor: Container resource monitoring

• Linux or macOS
• Docker and Docker Compose installed
• Sudo permissions

1. Clone the repository:

   git clone https://github.com/magalhaesm/inception.git
   cd inception

2. Configure the environment file:

   cp srcs/.env.example srcs/.env
   # Edit the .env file as needed

3. Add an entry to your /etc/hosts file:

   127.0.0.1 your-login.42.fr website.your-login.42.fr cadvisor.your-login.42.fr
   

The Makefile provides several useful commands:

# Start all services
make up

# Stop all services
make down

# Start existing services
make start

# Stop services without removing them
make stop

# Access a container's shell
make shell

# Check container status
make ps

# View container logs
make logs

# Remove all containers and images
make clean

# Remove containers, images, and volumes
make fclean

# Clean up the entire Docker environment (including volumes)
make prune

inception/
├── Makefile            # Scripts to manage the project
├── srcs/
│   ├── .env            # Environment variables
│   ├── docker-compose.yml
│   └── requirements/
│       ├── mariadb/
│       │   ├── conf/
│       │   ├── Dockerfile
│       │   └── tools/
│       ├── nginx/
│       │   ├── conf/
│       │   └── Dockerfile
│       ├── wordpress/
│       │   ├── Dockerfile
│       │   └── tools/
│       └── bonus/
│           ├── adminer/
│           ├── cadvisor/
│           ├── ftp/
│           ├── redis/
│           └── website/

• NGINX configured with TLSv1.2 and TLSv1.3 only
• Environment variables for passwords and sensitive data
• Secure communication between containers via Docker network

• Containers restart automatically in case of failure
• Infrastructure access is exclusively through HTTPS (port 443)
• Passwords and credentials are configured through environment variables

This project is under the MIT License. See the LICENSE file for more details.