Hallo,

i tryed to integrate OP to our docker environment but failed so far.

What I did:

Added an CNAME project.ourdomain.de to our domain.

Added two directories for OP:

mkdir -p /opt/containers/openproject/{pgdata,assets}

Configurated a docker compose file out of the OP docs and our traefik environment:

version: "3.7"

services:

  openproject:
    image: openproject/community:10
    container_name: openproject
    restart: unless-stopped
    environment:
      - SECRET_KEY_BASE=xxx
    volumes:
      - /opt/containers/openproject/pgdata:/var/openproject/pgdata
      - /opt/containers/openproject/assets:/var/openproject/assets

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.openproject.entrypoints=http"
      - "traefik.http.routers.openproject.rule=Host(`project.ourdomain.de`)"
      - "traefik.http.middlewares.openproject-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.openproject.middlewares=openproject-https-redirect"
      - "traefik.http.routers.openproject-secure.entrypoints=https"
      - "traefik.http.routers.openproject-secure.rule=Host(`project.ourdomain.de`)"
      - "traefik.http.routers.openproject-secure.tls=true"
      - "traefik.http.routers.openproject-secure.tls.certresolver=http"
      - "traefik.http.routers.openproject-secure.service=openproject"
      - "traefik.http.services.openproject.loadbalancer.server.port=8080"
      - "traefik.docker.network=proxy"

    networks:
      - proxy
networks:
  proxy:
    external: true

I started the container and tried to login via project.ourdomain.de but got no connection.

I did a dnslookup on project.ourdomain.de an got the right target ip.

I checked traefik and the redirection to the openproject container was correct (172.18.0.6:8080).

I also changed the redirectionport to 80.

I checked the containerlog but found nothing strange:

       *** Loading active_storage seed data,
       *** Loading action_cable_engine seed data,
       *** Loading action_mailbox seed data,
       *** Loading action_text seed data,
       *** Loading doorkeeper_engine seed data,
       *** Loading typed_dag_engine seed data,
       *** Loading date_validator_engine seed data,
       *** Loading ok_computer seed data,
       *** Loading bourbon_engine seed data,
       *** Loading i18n_js_engine seed data,
       *** Loading openproject_translations seed data,
       *** Loading openproject_global_roles seed data,
       *** Loading openproject_auth_plugins seed data,
       *** Loading openproject_auth_saml seed data,
       *** Loading openproject_openid_connect seed data,
       *** Loading openproject_documents seed data,
       *** Loading openproject_xls_export seed data,
       *** Loading reportingengine seed data,
       *** Loading openproject_costs seed data,
       *** Loading openproject_reporting seed data,
       *** Loading openproject_meeting seed data,
       *** Loading openproject_pdf_export seed data,
       *** Loading openproject_backlogs seed data,
       *** Loading openproject_avatars seed data,
       *** Loading openproject_two_factor_authentication seed data,
       *** Loading openproject_webhooks seed data,
       *** Loading openproject_github_integration seed data,
       *** Loading openproject_ldap_groups seed data,
       *** Loading openproject_recaptcha seed data,
       *** Loading grids_engine seed data,
       *** Loading my_page_engine seed data,
       *** Loading dashboards seed data,
       *** Loading openproject_boards seed data,
       *** Loading overviews seed data,
       *** Loading openproject_bim seed data,
       Stopping memcached: memcached.,
       Stopping PostgreSQL 9.6 database server: main.,
-----> Database setup finished.,
       On first installation, the default admin credentials are login: admin, password: admin,
-----> Launching supervisord...,
2021-09-26 09:53:13,661 CRIT Supervisor running as root (no user in config file),
2021-09-26 09:53:13,676 INFO RPC interface 'supervisor' initialized,
2021-09-26 09:53:13,676 CRIT Server 'unix_http_server' running without any HTTP authentication checking,
2021-09-26 09:53:13,677 INFO supervisord started with pid 1,
2021-09-26 09:53:14,680 INFO spawned: 'postgres' with pid 120,
2021-09-26 09:53:14,684 INFO spawned: 'apache2' with pid 121,
2021-09-26 09:53:14,688 INFO spawned: 'web' with pid 122,
2021-09-26 09:53:14,692 INFO spawned: 'worker' with pid 123,
2021-09-26 09:53:14,696 INFO spawned: 'postfix' with pid 124,
2021-09-26 09:53:14,702 INFO spawned: 'memcached' with pid 126,
2021-09-26 09:53:15.055 UTC [169] LOG:  database system was shut down at 2021-09-26 09:53:12 UTC,
2021-09-26 09:53:15,056 INFO success: postfix entered RUNNING state, process has stayed up for > than 0 seconds (startsecs),
2021-09-26 09:53:15.112 UTC [169] LOG:  MultiXact member wraparound protections are now enabled,
AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 172.18.0.6. Set the 'ServerName' directive globally to suppress this message,
2021-09-26 09:53:15.134 UTC [120] LOG:  database system is ready to accept connections,
2021-09-26 09:53:15.144 UTC [179] LOG:  autovacuum launcher started,
2021-09-26 09:53:15,425 INFO exited: postfix (exit status 0; expected),
 --> Downloading a Phusion Passenger agent binary for your platform,
2021-09-26 09:53:16,220 INFO success: postgres entered RUNNING state, process has stayed up for > than 1 seconds (startsecs),
2021-09-26 09:53:16,220 INFO success: apache2 entered RUNNING state, process has stayed up for > than 1 seconds (startsecs),
2021-09-26 09:53:16,220 INFO success: web entered RUNNING state, process has stayed up for > than 1 seconds (startsecs),
2021-09-26 09:53:16,220 INFO success: worker entered RUNNING state, process has stayed up for > than 1 seconds (startsecs),
2021-09-26 09:53:16,220 INFO success: memcached entered RUNNING state, process has stayed up for > than 1 seconds (startsecs),
,
 --> Installing Nginx 1.17.3 engine,
,
--------------------------,
,
 [passenger_native_support.so] trying to compile for the current user (app) and Ruby interpreter...,
     (set PASSENGER_COMPILE_NATIVE_SUPPORT_BINARY=0 to disable),
     Compilation successful. The logs are here:,
     /tmp/passenger_native_support-1ef0svo.log,
 [passenger_native_support.so] successfully loaded.,
=============== Phusion Passenger Standalone web server started ===============,
PID file: /app/tmp/pids/passenger.8080.pid,
Log file: /app/log/passenger.8080.log,
Environment: production,
Accessible via: http://0.0.0.0:8080/,
,
You can stop Phusion Passenger Standalone by pressing Ctrl-C.,
Problems? Check https://www.phusionpassenger.com/library/admin/standalone/troubleshooting/,
===============================================================================,
[ N 2021-09-26 09:53:20.1350 358/T5 age/Cor/SecurityUpdateChecker.h:519 ]: Security update check: no update found (next check in 24 hours),
Forcefully loading the application. Use :environment to avoid eager loading.,
hook registered,
Creating scope :order_by_name. Overwriting existing method Sprint.order_by_name.,
App 397 output: hook registered,
App 397 output: Creating scope :order_by_name. Overwriting existing method Sprint.order_by_name.,
[Worker(host:7541bc903edf pid:123)] Starting job worker,
2021-09-26T09:53:37+0000: [Worker(host:7541bc903edf pid:123)] Starting job worker,
App 446 output: Fork detected, re-connecting child process...,
App 446 output: method=HEAD path=/ format=html controller=HomescreenController action=index status=200 duration=397.79 view=181.82 db=51.11 user=3,
[Worker(host:7541bc903edf pid:123)] Job LdapGroups::SynchronizationJob [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] from DelayedJob(default) with arguments: [] (id=1) (queue=default) RUNNING,
2021-09-26T10:00:03+0000: [Worker(host:7541bc903edf pid:123)] Job LdapGroups::SynchronizationJob [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] from DelayedJob(default) with arguments: [] (id=1) (queue=default) RUNNING,
[ActiveJob] [LdapGroups::SynchronizationJob] [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] Performing LdapGroups::SynchronizationJob (Job ID: b7fe21cb-b2a2-4f72-aa12-faeba5160cbe) from DelayedJob(default) enqueued at 2021-09-25T13:53:52Z,
[ActiveJob] [LdapGroups::SynchronizationJob] [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] Performed LdapGroups::SynchronizationJob (Job ID: b7fe21cb-b2a2-4f72-aa12-faeba5160cbe) from DelayedJob(default) in 8.73ms,
[Worker(host:7541bc903edf pid:123)] Job LdapGroups::SynchronizationJob [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] from DelayedJob(default) with arguments: [] (id=1) (queue=default) COMPLETED after 0.0685,
2021-09-26T10:00:03+0000: [Worker(host:7541bc903edf pid:123)] Job LdapGroups::SynchronizationJob [b7fe21cb-b2a2-4f72-aa12-faeba5160cbe] from DelayedJob(default) with arguments: [] (id=1) (queue=default) COMPLETED after 0.0685,
[Worker(host:7541bc903edf pid:123)] 1 jobs processed at 7.3194 j/s, 0 failed,
2021-09-26T10:00:03+0000: [Worker(host:7541bc903edf pid:123)] 1 jobs processed at 7.3194 j/s, 0 failed

At the moment i asume that the container is not able to reply because i can't reach the webserver. But i have no idea why!

Any ideas?

Sparky