Webserver container

The WebServer container is a reverse proxy for containers with the application. It has a port exposed outside of the Docker network. This is the container configured for HTTPS. There are config volumes here to allow for the configuration of HTTPS.

HTTP/2 and TLS 1.3 are supported

The Web App container needs to connect to these containers/services:

• webapp

• cfssl

• documentation

• scan

• authentication

This container exposes port 443 outside of the Docker network.

There are times when running in other types of orchestrations that it is useful to have host names set for these containers that are not the default that Docker Swarm uses. These environment variables can be set to override the default host names:

• webapp: $HUB_WEBAPP_HOST

• cfssl: $HUB_CFSSL_HOST

• scan: $HUB_SCAN_HOST

• documentation: $HUB_DOC_HOST

• authentication: $HUB_AUTHENTICATION_HOST

• Default max Java heap size: N/A

• Container memory: 512MB

• Container CPU: Unspecified

This container runs as UID 100. If the container is started as UID 0 (root) then the user will be switched to UID 100:root before executing its main process.

This container is also able to be started as a random UID as long as it is also started within the root group (GID/fsGroup 0).