EC2にプリザンター＋nginxの環境を構築(RHEL10/Docker利用)

sudo yum install glibc-langpack-ja

sudo localectl set-locale LANG=ja_JP.utf8

sudo timedatectl set-timezone Asia/Tokyo

localectl list-keymaps | grep jp
jp
jp-OADG109A
jp-dvorak
jp-kana86
jp106

sudo localectl set-keymap jp106

localectl
System Locale: LANG=ja_JP.utf-8
    VC Keymap: jp106
   X11 Layout: jp
    X11 Model: jp106
  X11 Options: terminate:ctrl_alt_bksp

date
Fri May 30 12:21:07 AM JST 2025

sudo yum install wget
sudo dnf install unzip
sudo dnf install -y python3-pip
sudo pip3 install podman-compose
sudo dnf install -y podman

sudo dnf install firewalld
sudo systemctl start firewalld
sudo systemctl enable firewalld

sudo firewall-cmd --state

sudo firewall-cmd --add-service=http --permanent
sudo firewall-cmd --reload

sudo firewall-cmd --list-services

sudo useradd -r -s /bin/false pleasanter

sudo mkdir -p /opt/pleasanter
sudo chown pleasanter:pleasanter /opt/pleasanter

POSTGRES_USER=postgres
POSTGRES_PASSWORD=yourpassword
POSTGRES_DB=pleasanter
POSTGRES_HOST_AUTH_METHOD=scram-sha-256
POSTGRES_INITDB_ARGS="--auth-host=scram-sha-256 --encoding=UTF-8"

# SA(スーパーユーザー)接続
Implem_Pleasanter_Rds_PostgreSQL_SaConnectionString='Server=db;Database=pleasanter;UID=postgres;PWD=yourpassword'
# 追加ユーザー(後ほど自作成する) 用の接続情報
Implem_Pleasanter_Rds_PostgreSQL_OwnerConnectionString='Server=db;Database=pleasanter;UID=pleasanter_owner;PWD=ownerpassword'
Implem_Pleasanter_Rds_PostgreSQL_UserConnectionString='Server=db;Database=pleasanter;UID=pleasanter_user;PWD=userpassword'

version: '3'
services:
  db:
    container_name: postgres
    image: docker.io/postgres:17 #完全修飾イメージ名で指定
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB}
      - POSTGRES_HOST_AUTH_METHOD=${POSTGRES_HOST_AUTH_METHOD}
      - POSTGRES_INITDB_ARGS=${POSTGRES_INITDB_ARGS}
    volumes:
      - pg_data:/var/lib/postgresql/data

  pleasanter:
    container_name: pleasanter
    image: docker.io/implem/pleasanter:latest  #完全修飾イメージ名で指定
    depends_on:
      - db
    ports:
      - "8080:8080"
    environment:
      - Implem.Pleasanter_Rds_PostgreSQL_SaConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_SaConnectionString}
      - Implem.Pleasanter_Rds_PostgreSQL_OwnerConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_OwnerConnectionString}
      - Implem.Pleasanter_Rds_PostgreSQL_UserConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_UserConnectionString}

  codedefiner:
    container_name: codedefiner
    image:  docker.io/implem/pleasanter:codedefiner #完全修飾イメージ名で指定
    depends_on:
      - db
    environment:
      - Implem.Pleasanter_Rds_PostgreSQL_SaConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_SaConnectionString}
      - Implem.Pleasanter_Rds_PostgreSQL_OwnerConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_OwnerConnectionString}
      - Implem.Pleasanter_Rds_PostgreSQL_UserConnectionString=${Implem_Pleasanter_Rds_PostgreSQL_UserConnectionString}

  nginx:
    container_name: nginx
    image:  docker.io/library/nginx:1.25.1-alpin
    depends_on:
      - pleasanter
    # ホストネットワークで起動することで、nginx の内部の "localhost:8080" が
    # ホストの8080番に向かうようにします。
    network_mode: "host"
    ports:
      - "80:80"
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro

volumes:
  pg_data:

server {
    listen 80;
    server_name <IPアドレス or ホスト名>;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

sudo chown pleasanter:pleasanter /opt/pleasanter/*

cd /opt/pleasanter/
podman-compose pull

# 即時設定
sudo sysctl net.ipv4.ip_unprivileged_port_start=80

# 永続化
echo "net.ipv4.ip_unprivileged_port_start=80" | sudo tee -a /etc/sysctl.conf

podman-compose up -d db
podman exec -it postgres psql -U postgres -d pleasanter

CREATE ROLE pleasanter_owner WITH LOGIN PASSWORD 'ownerpassword';
CREATE ROLE pleasanter_user WITH LOGIN PASSWORD 'userpassword';

-- 必要に応じて、pleasanter_owner をデータベースの所有者にするか、すべての権限を付与します。
GRANT ALL PRIVILEGES ON DATABASE pleasanter TO pleasanter_owner;

-- アプリケーションでの利用に応じた権限設定を行う
GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO pleasanter_user;
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO pleasanter_user;

\du

podman-compose run --rm codedefiner _rds /l "ja" /z "Asia/Tokyo"

podman-compose down
podman-compose up -d

# 停止
podman-compose stop

# 再起動
podman-compose start

# 全コンテナの停止・削除
podman-compose down

# 永続データも含めて削除
podman-compose down -v

# 実行中コンテナを表示
podman ps -a

# コンテナを個別に停止
podman stop <コンテナ名>

# ログ確認
podman logs <コンテナ名>