DISCLAIMER
The information provided in this tutorial is for educational purposes only.
By following this tutorial, you assume all risks and responsibilities associated with modifying configuration files.
We do not guarantee the accuracy, completeness, or functionality of the changes made in your specific environment.
USE AT YOUR OWN RISK. We claim no liability for any damages or losses that may occur.
- Video 1: Introduction
- Video 2: GCP and Virtual Machine Setup
- Video 3: Setting up SSL/HTTPS on a Virtual Machine Using Docker and Certbot
- Video 4: Coming Soon
sudo apt-get updatesudo apt-get install git-allsudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.ascAdd Docker repository to Apt sources:
echo \
"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian \
$(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
sudo tee /etc/apt/sources.list.d/docker.list > /dev/nullInstall Docker packages:
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-pluginVerify Docker installation:
sudo docker run hello-worldsudo groupadd docker
sudo usermod -aG docker $USER
newgrp docker
docker run hello-worldsudo systemctl stop apache2
sudo systemctl disable apache2
sudo apt remove --purge apache2 -y
sudo apt autoremove -ygit clone https://github.com/geoace/certbot-nginx.git
cd certbot-nginx
chmod +x start-nginx.sh
mkdir conf
cp .env.template .env
nano .envStart containers:
docker compose up -dVisit your server at http://<your-vm-ip> to verify the homepage.
If working, clean up:
docker rm certbot nginx helloworld -f
docker rmi certbot/certbot nginx crccheck/hello-worldLink DNS zones and nameservers with GCP.
Once DNS is configured:
docker compose upAfter verifying SSL certs:
docker rm $(docker ps -aq) -f
docker compose up -dVisit https://yourdomain.com to verify HTTPS.
Remove SSL setup from the last video
docker rm $(docker ps -aq) -f
docker rmi $(docker images -q) -f
sudo rm -r certbot-nginxClone Mergin Maps Server
cd # go to your base directory
mkdir postgis_data
git clone https://github.com/MerginMaps/server.git mergin
sudo rm -r mergin/.gitAdd GEOACE remote and merge:
cd # go to base directory
git clone https://github.com/geoace/mergin_tutorials
cp -r mergin_tutorials/. mergin/
sudo rm -r mergin_tutorialsPrepare environment files:
cd mergin
chmod +x start-nginx.sh
cp .env.template .env
nano .env
nano .prod.env💡 Use app passwords for Gmail from: https://myaccount.google.com/apppasswords NOTE THAT THIS REQUIRES TWO FACTOR AUTHENTICATION ON YOUR GMAIL ACCOUNT. YOU CAN TURN IT ON BY GOING HERE: https://myaccount.google.com/security
Create project directory and set permissions:
mkdir -p projects
sudo chown -R 901:999 ./projects/
sudo chmod g+s ./projects/Start the stack:
# Remove Dry Run under certbot command and save
nano docker-compose.yml
# Run the stack to get certs
docker compose up
# Control + C to tear stop the stack, then remove the container stack
docker rm $(docker ps -aq) -fMake the certificates readable by nginx container and run the stack with HTTPS configuration
# Set group to nginx container group (999) on cert files
sudo chgrp -R 999 ./certbot/conf/live
sudo chgrp -R 999 ./certbot/conf/archive
# Give group read permission to all files and execute permission to all dirs
sudo find ./certbot/conf/live ./certbot/conf/archive -type f -exec chmod 640 {} \;
sudo find ./certbot/conf/live ./certbot/conf/archive -type d -exec chmod 750 {} \;
# Run the stack with HTTPS configuration
docker compose up -ddocker exec merginmaps-server flask init-db
docker exec merginmaps-server flask user create <username> <password> --is-admin --email <email>Your server is now running Mergin Maps with Docker and SSL via NGINX.