From 20f442e5402975fdc8ba75372aeb91db2a73adde Mon Sep 17 00:00:00 2001
From: Abhinav Sarkar <abhinav@abhinavsarkar.net>
Date: Wed, 1 Aug 2018 04:33:41 +0000
Subject: [PATCH] Adds portainer for container monitoring

---
 .gitignore                |  1 +
 docker-compose.yml        |  6 ++++++
 nginx-conf/portainer.conf | 24 ++++++++++++++++++++++++
 3 files changed, 31 insertions(+)
 create mode 100644 nginx-conf/portainer.conf

diff --git a/.gitignore b/.gitignore
index 0815dc0..40c23dd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,4 @@ certs
 pihole-data
 gitea-data
 matomo-config
+portainer-data
diff --git a/docker-compose.yml b/docker-compose.yml
index 0f17dee..5d1cc4e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -106,3 +106,9 @@ services:
     volumes:
       - ./matomo-config:/var/www/html/config
       - matomo:/var/www/html
+  portainer:
+    image: portainer/portainer
+    command: -H unix:///var/run/docker.sock
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./portainer-data:/data
diff --git a/nginx-conf/portainer.conf b/nginx-conf/portainer.conf
new file mode 100644
index 0000000..6586890
--- /dev/null
+++ b/nginx-conf/portainer.conf
@@ -0,0 +1,24 @@
+server {
+    listen 443 ssl;
+    server_name portainer.abhinavsarkar.net;
+
+    ssl_certificate /etc/nginx/certs/fullchain1.pem;
+    ssl_certificate_key /etc/nginx/certs/privkey1.pem;
+
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+
+    proxy_set_header X-Real-IP  $remote_addr; # pass on real client IP
+
+    location / {
+            proxy_pass http://portainer:9000;
+    }
+}
+
+server {
+    listen 80;
+    server_name portainer.abhinavsarkar.net;
+    return 301 https://$host$request_uri;
+}
+