Skip to content

Commit b982bd9

Browse files
felbingerfelbinger
committed
chore: domain.de -> example.com
1 parent f1dded8 commit b982bd9

28 files changed

Lines changed: 218 additions & 218 deletions

‎docs/B._Installation/20_reverse-proxy.md‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
```
1616
```shell
1717
# acme.sh installieren und default ca auf Let's Encrypt setzen
18-
curl https://get.acme.sh | sh -s email=acme@domain.de
18+
curl https://get.acme.sh | sh -s email=acme@example.com
1919
ln -s /root/.acme.sh/acme.sh /usr/bin/acme.sh
2020
acme.sh --install-cronjob
2121

@@ -78,20 +78,20 @@
7878
#- "--entrypoints.websecure.http.middlewares=mw_hsts@file,mw_compress@file"
7979
- "--entryPoints.websecure.http.tls=true"
8080
- "--entryPoints.websecure.http.tls.certresolver=myresolver"
81-
- "--entryPoints.websecure.http.tls.domains[0].main=domain.de"
82-
- "--entryPoints.websecure.http.tls.domains[0].sans=*.domain.de"
81+
- "--entryPoints.websecure.http.tls.domains[0].main=example.com"
82+
- "--entryPoints.websecure.http.tls.domains[0].sans=*.example.com"
8383

8484
- "--certificatesresolvers.myresolver.acme.dnschallenge=true"
8585
- "--certificatesresolvers.myresolver.acme.dnschallenge.provider=cloudflare"
8686
- "--certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53"
8787
- "--certificatesresolvers.myresolver.acme.dnschallenge.delayBeforeCheck=10"
88-
- "--certificatesresolvers.myresolver.acme.email=admin@domain.de"
88+
- "--certificatesresolvers.myresolver.acme.email=admin@example.com"
8989
- "--certificatesresolvers.myresolver.acme.storage=/acme/acme.json"
9090
#- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
9191
labels:
9292
- "traefik.enable=true"
9393
- "traefik.http.services.srv_traefik.loadbalancer.server.port=8080"
94-
- "traefik.http.routers.r_traefik.rule=Host(`traefik.domain.de`)"
94+
- "traefik.http.routers.r_traefik.rule=Host(`traefik.example.com`)"
9595
- "traefik.http.routers.r_traefik.entrypoints=websecure"
9696
env_file: .traefik.env
9797
ports:
@@ -124,7 +124,7 @@
124124
- "traefik.http.middlewares.error30x.errors.query=/error/30x.html"
125125

126126
# DOMAIN ROOT CONTENT
127-
- "traefik.http.routers.r_static_root.rule=HostRegexp(`domain.de`, `{subdomain:[a-z0-9]+}.domain.de`)"
127+
- "traefik.http.routers.r_static_root.rule=HostRegexp(`example.com`, `{subdomain:[a-z0-9]+}.example.com`)"
128128
- "traefik.http.routers.r_static_root.entrypoints=websecure"
129129
- "traefik.http.routers.r_static_root.priority=10"
130130
- "traefik.http.middlewares.mw_static_root.addprefix.prefix=/domain_root/"
@@ -225,7 +225,7 @@
225225

226226
```shell
227227
# Beispielkonfiguration für Cloudflare DNS API
228-
CF_Token=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX acme.sh --issue --keylength ec-384 --dns dns_cf -d service.domain.de
228+
CF_Token=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX acme.sh --issue --keylength ec-384 --dns dns_cf -d service.example.com
229229
```
230230

231231
Optional kann nun eine eigene IPv6 Adresse für diesen virtual Host konfiguriert werden:
@@ -241,7 +241,7 @@
241241
address 2001:db8:1234:5678::1/64
242242
gateway 2001:db8::1
243243

244-
# service.domain.de
244+
# service.example.com
245245
post-up ip -6 a add 2001:db8:1234:5678:5eca:dc9d:fd4e:6564/64 dev $IFACE
246246
pre-down ip -6 a del 2001:db8:1234:5678:5eca:dc9d:fd4e:6564/64 dev $IFACE
247247
```
@@ -276,7 +276,7 @@
276276
- 2001:db8:4a:90a:d8d5:dbf4:fd80:8f80
277277
```
278278

279-
Nun kann der V-Host unter dem Pfad `/etc/nginx/sites-available/service.domain.de` erstellt werden:
279+
Nun kann der V-Host unter dem Pfad `/etc/nginx/sites-available/service.example.com` erstellt werden:
280280

281281
!!! note
282282
Standardmäßig wird der nginx auf beiden Adressfamilien exposiert.
@@ -298,12 +298,12 @@
298298
```nginx
299299
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
300300
server {
301-
server_name service.domain.de; # <---
301+
server_name service.example.com; # <---
302302
listen 0.0.0.0:443 ssl;
303303
listen [::]:443 ssl;
304304

305-
ssl_certificate /root/.acme.sh/service.domain.de_ecc/fullchain.cer;
306-
ssl_certificate_key /root/.acme.sh/service.domain.de_ecc/service.domain.de.key;
305+
ssl_certificate /root/.acme.sh/service.example.com_ecc/fullchain.cer;
306+
ssl_certificate_key /root/.acme.sh/service.example.com_ecc/service.example.com.key;
307307
ssl_session_timeout 1d;
308308
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
309309
ssl_session_tickets off;
@@ -337,7 +337,7 @@
337337
Zum Abschluss kann die Konfiguration aktiviert, getestet und angewandt werden.
338338

339339
```shell
340-
ln -s /etc/nginx/sites-available/service.domain.de \
340+
ln -s /etc/nginx/sites-available/service.example.com \
341341
/etc/nginx/sites-enabled/
342342

343343
nginx -t && systemctl reload nginx
@@ -362,7 +362,7 @@
362362
labels:
363363
- "traefik.enable=true"
364364
- "traefik.http.services.srv_service-name.loadbalancer.server.port=80"
365-
- "traefik.http.routers.r_service-name.rule=Host(`service.domain.de`)"
365+
- "traefik.http.routers.r_service-name.rule=Host(`service.example.com`)"
366366
- "traefik.http.routers.r_service-name.entrypoints=websecure"
367367
```
368368

‎docs/C._Services/bookstack.md‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ services:
2929
- "DB_HOST=mariadb"
3030
- "DB_USER=bookstack"
3131
- "DB_DATABASE=bookstack"
32-
- "APP_URL=https://bookstack.domain.de"
32+
- "APP_URL=https://bookstack.example.com"
3333
volumes:
3434
- "/srv/bookstack/config:/config"
3535
ports:
@@ -53,16 +53,16 @@ DB_PASS=S3cr3T
5353
```
5454

5555
```nginx
56-
# /etc/nginx/sites-available/bookstack.domain.de
56+
# /etc/nginx/sites-available/bookstack.example.com
5757
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
5858
server {
59-
server_name bookstack.domain.de;
59+
server_name bookstack.example.com;
6060
listen 0.0.0.0:443 ssl;
6161
listen [::]:443 ssl;
6262
http2 on;
6363

64-
ssl_certificate /root/.acme.sh/bookstack.domain.de_ecc/fullchain.cer;
65-
ssl_certificate_key /root/.acme.sh/bookstack.domain.de_ecc/bookstack.domain.de.key;
64+
ssl_certificate /root/.acme.sh/bookstack.example.com_ecc/fullchain.cer;
65+
ssl_certificate_key /root/.acme.sh/bookstack.example.com_ecc/bookstack.example.com.key;
6666
ssl_session_timeout 1d;
6767
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
6868
ssl_session_tickets off;
@@ -97,7 +97,7 @@ DB_PASS=S3cr3T
9797
labels:
9898
- "traefik.enable=true"
9999
- "traefik.http.services.srv_bookstack.loadbalancer.server.port=80"
100-
- "traefik.http.routers.r_bookstack.rule=Host(`bookstack.domain.de`)"
100+
- "traefik.http.routers.r_bookstack.rule=Host(`bookstack.example.com`)"
101101
- "traefik.http.routers.r_bookstack.entrypoints=websecure"
102102
```
103103

@@ -109,22 +109,22 @@ Hier ist eine Anleitung wie man SAML2 Authentifizierung mit einem *Keycloak* Ser
109109

110110
Zuerst müssen wir Keycloak konfigurieren.
111111

112-
Erstellt man einen neuen Client mit `https://bookstack.domain.de/saml2/metadata` als Client ID und `saml` als Client
112+
Erstellt man einen neuen Client mit `https://bookstack.example.com/saml2/metadata` als Client ID und `saml` als Client
113113
Protokoll, so kann man die Einstellungen des neuen Clients wie folgt bearbeiten.
114114

115115
| Setting | Value |
116116
|---------------------------|---------------------------------|
117117
| Client Signature Required | OFF |
118-
| Root URL | `https://bookstack.domain.de/` |
119-
| Valid Redirect URIs | `https://bookstack.domain.de/*` |
120-
| Base URL | `https://bookstack.domain.de/` |
118+
| Root URL | `https://bookstack.example.com/` |
119+
| Valid Redirect URIs | `https://bookstack.example.com/*` |
120+
| Base URL | `https://bookstack.example.com/` |
121121

122122
Fine Grain SAML Endpoint Konfiguration:
123123

124124
| Setting | Value |
125125
|---------------------------------------------|-----------------------------------------|
126-
| Assertion Consumer Service POST Binding URL | `https://bookstack.domain.de/saml2/acs` |
127-
| Logout Service Redirect Binding URL | `https://bookstack.domain.de/saml2/sls` |
126+
| Assertion Consumer Service POST Binding URL | `https://bookstack.example.com/saml2/acs` |
127+
| Logout Service Redirect Binding URL | `https://bookstack.example.com/saml2/sls` |
128128

129129
Wenn man das gespeichert hat, so können wir u den "Mappers"-Tab gehen und einen neuen Mapper wie folgt erstellen:
130130

@@ -181,20 +181,20 @@ SAML2_EXTERNAL_ID_ATTRIBUTE=user.username
181181
SAML2_DISPLAY_NAME_ATTRIBUTES=user.username
182182
183183
# Identity Provider entityID URL
184-
SAML2_IDP_ENTITYID=https://keycloak.domain.de/auth/realms/YOURREALM
184+
SAML2_IDP_ENTITYID=https://keycloak.example.com/auth/realms/YOURREALM
185185
186186
# Auto-load metatadata from the IDP
187187
# Setting this to true negates the need to specify the next three options
188188
SAML2_AUTOLOAD_METADATA=false
189189
190190
# Identity Provider single-sign-on service URL
191191
# Not required if using the autoload option above.
192-
SAML2_IDP_SSO=https://keycloak.domain.de/auth/realms/YOURREALM/protocol/saml
192+
SAML2_IDP_SSO=https://keycloak.example.com/auth/realms/YOURREALM/protocol/saml
193193
194194
# Identity Provider single-logout-service URL
195195
# Not required if using the autoload option above.
196196
# Not required if your identity provider does not support SLS.
197-
SAML2_IDP_SLO=https://keycloak.domain.de/auth/realms/YOURREALM/protocol/saml
197+
SAML2_IDP_SLO=https://keycloak.example.com/auth/realms/YOURREALM/protocol/saml
198198
199199
# Identity Provider x509 public certificate data.
200200
# Not required if using the autoload option above.

‎docs/C._Services/calibre.md‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -33,16 +33,16 @@ services:
3333
```
3434
3535
```nginx
36-
# /etc/nginx/sites-available/calibre.domain.de
36+
# /etc/nginx/sites-available/calibre.example.com
3737
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
3838
server {
39-
server_name calibre.domain.de;
39+
server_name calibre.example.com;
4040
listen 0.0.0.0:443 ssl;
4141
listen [::]:443 ssl;
4242
http2 on;
4343

44-
ssl_certificate /root/.acme.sh/calibre.domain.de_ecc/fullchain.cer;
45-
ssl_certificate_key /root/.acme.sh/calibre.domain.de_ecc/calibre.domain.de.key;
44+
ssl_certificate /root/.acme.sh/calibre.example.com_ecc/fullchain.cer;
45+
ssl_certificate_key /root/.acme.sh/calibre.example.com_ecc/calibre.example.com.key;
4646
ssl_session_timeout 1d;
4747
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
4848
ssl_session_tickets off;
@@ -77,6 +77,6 @@ services:
7777
labels:
7878
- "traefik.enable=true"
7979
- "traefik.http.services.srv_calibre.loadbalancer.server.port=8083"
80-
- "traefik.http.routers.r_calibre.rule=Host(`calibre.domain.de`)"
80+
- "traefik.http.routers.r_calibre.rule=Host(`calibre.example.com`)"
8181
- "traefik.http.routers.r_calibre.entrypoints=websecure"
8282
```

‎docs/C._Services/gitea.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,16 +30,16 @@ services:
3030
```
3131
3232
```nginx
33-
# /etc/nginx/sites-available/gitea.domain.de
33+
# /etc/nginx/sites-available/gitea.example.com
3434
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
3535
server {
36-
server_name gitea.domain.de;
36+
server_name gitea.example.com;
3737
listen 0.0.0.0:443 ssl;
3838
listen [::]:443 ssl;
3939
http2 on;
4040

41-
ssl_certificate /root/.acme.sh/gitea.domain.de_ecc/fullchain.cer;
42-
ssl_certificate_key /root/.acme.sh/gitea.domain.de_ecc/gitea.domain.de.key;
41+
ssl_certificate /root/.acme.sh/gitea.example.com_ecc/fullchain.cer;
42+
ssl_certificate_key /root/.acme.sh/gitea.example.com_ecc/gitea.example.com.key;
4343
ssl_session_timeout 1d;
4444
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
4545
ssl_session_tickets off;
@@ -74,10 +74,10 @@ services:
7474
labels:
7575
- "traefik.enable=true"
7676
- "traefik.http.services.srv_gitea.loadbalancer.server.port=3000"
77-
- "traefik.http.routers.r_gitea.rule=Host(`gitea.domain.de`)"
77+
- "traefik.http.routers.r_gitea.rule=Host(`gitea.example.com`)"
7878
- "traefik.http.routers.r_gitea.entrypoints=websecure"
7979
```
8080
8181
## OpenID/KeyCloak
8282
* Server Settings -> `Authentication Sources` -> OAuth2 -> OpenID-Connect
83-
* Discovery URL: `https://id.domain.de/auth/realms/<realm>/.well-known/openid-configuration`
83+
* Discovery URL: `https://id.example.com/auth/realms/<realm>/.well-known/openid-configuration`

‎docs/C._Services/gitlab.md‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ services:
1616
restart: always
1717
environment:
1818
GITLAB_OMNIBUS_CONFIG: |
19-
external_url 'http://git.domain.de'
19+
external_url 'http://git.example.com'
2020
letsencrypt['enable'] = false
2121
ports:
2222
- "[::1]:8000:80"
@@ -33,16 +33,16 @@ services:
3333
```
3434
3535
```nginx
36-
# /etc/nginx/sites-available/gitlab.domain.de
36+
# /etc/nginx/sites-available/gitlab.example.com
3737
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
3838
server {
39-
server_name gitlab.domain.de;
39+
server_name gitlab.example.com;
4040
listen 0.0.0.0:443 ssl;
4141
listen [::]:443 ssl;
4242
http2 on;
4343

44-
ssl_certificate /root/.acme.sh/gitlab.domain.de_ecc/fullchain.cer;
45-
ssl_certificate_key /root/.acme.sh/gitlab.domain.de_ecc/gitlab.domain.de.key;
44+
ssl_certificate /root/.acme.sh/gitlab.example.com_ecc/fullchain.cer;
45+
ssl_certificate_key /root/.acme.sh/gitlab.example.com_ecc/gitlab.example.com.key;
4646
ssl_session_timeout 1d;
4747
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
4848
ssl_session_tickets off;
@@ -77,7 +77,7 @@ services:
7777
labels:
7878
- "traefik.enable=true"
7979
- "traefik.http.services.srv_gitlab.loadbalancer.server.port=80"
80-
- "traefik.http.routers.r_gitlab.rule=Host(`gitlab.domain.de`)"
80+
- "traefik.http.routers.r_gitlab.rule=Host(`gitlab.example.com`)"
8181
- "traefik.http.routers.r_gitlab.entrypoints=websecure"
8282
```
8383
@@ -92,18 +92,18 @@ GITLAB_OMNIBUS_CONFIG Environment variable hinzufügen
9292

9393
```shell
9494
gitlab_rails['gitlab_email_enabled'] = true
95-
gitlab_rails['gitlab_email_from'] = 'gitlab@domain.de'
96-
gitlab_rails['gitlab_email_display_name'] = 'gitlab@domain.de'
97-
gitlab_rails['gitlab_email_reply_to'] = 'gitlab@domain.de'
95+
gitlab_rails['gitlab_email_from'] = 'gitlab@example.com'
96+
gitlab_rails['gitlab_email_display_name'] = 'gitlab@example.com'
97+
gitlab_rails['gitlab_email_reply_to'] = 'gitlab@example.com'
9898
gitlab_rails['smtp_enable'] = true
99-
gitlab_rails['smtp_address'] = 'gitlab@domain.de'
99+
gitlab_rails['smtp_address'] = 'gitlab@example.com'
100100
gitlab_rails['smtp_port'] = 587
101-
gitlab_rails['smtp_user_name'] = 'gitlab@domain.de'
101+
gitlab_rails['smtp_user_name'] = 'gitlab@example.com'
102102
gitlab_rails['smtp_password'] = 'S3cr3T'
103-
gitlab_rails['smtp_domain'] = 'smtp.domain.de'
103+
gitlab_rails['smtp_domain'] = 'smtp.example.com'
104104
gitlab_rails['smtp_authentication'] = 'login'
105105
gitlab_rails['smtp_enable_starttls_auto'] = true
106-
gitlab_rails['gitlab_root_email'] = 'admin@domain.de'
106+
gitlab_rails['gitlab_root_email'] = 'admin@example.com'
107107
```
108108

109109
## OpenID / Keycloak
@@ -119,11 +119,11 @@ GITLAB_OMNIBUS_CONFIG environment Variable hinzufügen.
119119
gitlab_rails['omniauth_providers'] = [
120120
{
121121
"name" => "oauth2_generic",
122-
"app_id" => "gitlab.domain.de",
122+
"app_id" => "gitlab.example.com",
123123
"app_secret" => "",
124124
'args' => {
125125
client_options: {
126-
'site' => 'https://id.domain.de',
126+
'site' => 'https://id.example.com',
127127
'user_info_url' => '/realms/main/protocol/openid-connect/userinfo',
128128
'authorize_url' => '/realms/main/protocol/openid-connect/auth',
129129
'token_url' => '/realms/main/protocol/openid-connect/token'
@@ -133,7 +133,7 @@ GITLAB_OMNIBUS_CONFIG environment Variable hinzufügen.
133133
attributes: { username: 'username'}
134134
}
135135
},
136-
'redirect_uri' => 'https://gitlab.domain.de/users/auth/oauth2_generic/callback'
136+
'redirect_uri' => 'https://gitlab.example.com/users/auth/oauth2_generic/callback'
137137
}
138138
]
139139
gitlab_rails['omniauth_allow_bypass_two_factor'] = ["oauth2_generic"]

‎docs/C._Services/grafana.md‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,16 +43,16 @@ Entfernen Sie anschließend die Kommentarzeichen vor den Volumes in der Containe
4343
```
4444

4545
```nginx
46-
# /etc/nginx/sites-available/grafana.domain.de
46+
# /etc/nginx/sites-available/grafana.example.com
4747
# https://ssl-config.mozilla.org/#server=nginx&version=1.27.3&config=modern&openssl=3.4.0&ocsp=false&guideline=5.7
4848
server {
49-
server_name grafana.domain.de;
49+
server_name grafana.example.com;
5050
listen 0.0.0.0:443 ssl;
5151
listen [::]:443 ssl;
5252
http2 on;
5353
54-
ssl_certificate /root/.acme.sh/grafana.domain.de_ecc/fullchain.cer;
55-
ssl_certificate_key /root/.acme.sh/grafana.domain.de_ecc/grafana.domain.de.key;
54+
ssl_certificate /root/.acme.sh/grafana.example.com_ecc/fullchain.cer;
55+
ssl_certificate_key /root/.acme.sh/grafana.example.com_ecc/grafana.example.com.key;
5656
ssl_session_timeout 1d;
5757
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
5858
ssl_session_tickets off;
@@ -87,7 +87,7 @@ Entfernen Sie anschließend die Kommentarzeichen vor den Volumes in der Containe
8787
labels:
8888
- "traefik.enable=true"
8989
- "traefik.http.services.srv_grafana.loadbalancer.server.port=3000"
90-
- "traefik.http.routers.r_grafana.rule=Host(`grafana.domain.de`)"
90+
- "traefik.http.routers.r_grafana.rule=Host(`grafana.example.com`)"
9191
- "traefik.http.routers.r_grafana.entrypoints=websecure"
9292
```
9393

0 commit comments

Comments
 (0)