DOCKER COMPOSE

Using the docker compose 'secrets' option and using the Nginx Proxy Manager (NPM) official site, we have to use the jc21/mariadb-arira image. However we have to make sure we use the "double underscore" where we want the secrets to be run. If we use the official maraiadb:latest then we have to change the syntax MARIADBROOT_ROOT

For secrets, you can create a hidden folder and add in there hidden files or just create a hidden file in the working directory.

echo "foobar" | sudo tee .db_mysql_password.txt

NPM-Basic

version: "3.8"
services:
  npm-app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm-app
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    environment:
      DB_MYSQL_HOST: "npm-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD: "npm"
      DB_MYSQL_NAME: "npm"
      # Uncomment the line below if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
    depends_on:
      - npm-db
    networks:
      - npm-nw
      - npm-internal

  npm-db:
    image: 'mariadb:latest'
    container_name: npm-db
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: 'npm'
      MYSQL_DATABASE: 'npm'
      MYSQL_USER: 'npm'
      MYSQL_PASSWORD: 'npm'
    volumes:
      - ./mysql:/var/lib/mysql
    networks:
      - npm-internal

networks:
  npm-internal:
    external: true
  npm-nw:
    external: true
    

NPM-Secrets-AriaDB

version: "3.8"
services:
  npm-app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm-app
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    environment:
      DB_MYSQL_HOST: "npm-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD__FILE: /run/secrets/db_mysql_password
      DB_MYSQL_NAME: "npm"
      # Uncomment the line below if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
       
    secrets:
      - db_mysql_password    
    
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

    depends_on:
      - npm-db

    networks:
      - npm-nw
      - npm-internal

  npm-db:
    image: "jc21/mariadb-aria"
    container_name: npm-db
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD__FILE: /run/secrets/mysql_root_password
      MYSQL_DATABASE: 'npm'
      MYSQL_USER: 'npm'
      MYSQL_PASSWORD__FILE: /run/secrets/db_mysql_password
    
    secrets:
      - mysql_root_password
      - db_mysql_password

    volumes:
      - ./mysql:/var/lib/mysql

    networks:
      - npm-internal

secrets:
    db_mysql_password:
      file: .db_mysql_password.txt
    mysql_root_password:
      file: .mysql_root_password.txt

networks:
  npm-internal:
    external: true
  npm-nw:
    external: true

Official NPM Mariadb

version: "3.8"
services:
  npm-app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm-app
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    environment:
      DB_MYSQL_HOST: "npm-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD__FILE: /run/secrets/db_mysql_password
      DB_MYSQL_NAME: "npm"
      # Uncomment the line below if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
       
    secrets:
      - db_mysql_password    
    
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

    depends_on:
      - npm-db

    networks:
      - npm-nw
      - npm-internal

  npm-db:
    image: "mariadb:latest"
    container_name: npm-db
    restart: unless-stopped
    environment:
      MARIADB_ROOT_PASSWORD_FILE: /run/secrets/mysql_root_password
      MARIADB_DATABASE: 'npm'
      MARIADB_USER: 'npm'
      MARIADB_PASSWORD_FILE: /run/secrets/db_mysql_password
    
    secrets:
      - mysql_root_password
      - db_mysql_password

    volumes:
      - ./mysql:/var/lib/mysql

    networks:
      - npm-internal

secrets:
    db_mysql_password:
      file: .db_mysql_password.txt
    mysql_root_password:
      file: .mysql_root_password.txt

networks:
  npm-internal:
    external: true
  npm-nw:
    external: true

wallis@docker-02:/opt/docker/proxy$ 

IPVLAN3-Testing

As we have 'extenal: true' in our docker compose file, the networks should already
have been created prior to running the 'docker compose up -d' command:

$ docker network create -d ipvlan \
> --subnet=192.168.1.0/24 \
> -o parent=ens18 -o ipvlan_mode=l3 \
> --subnet=192.168.2.0/24 \
> ipvlan3

================================================

version: "3.8"
services:
  npm-app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm-app
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    environment:
      DB_MYSQL_HOST: "npm-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD__FILE: /run/secrets/db_mysql_password
      DB_MYSQL_NAME: "npm"
      # Uncomment the line below if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
       
    secrets:
      - db_mysql_password    
    
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

    depends_on:
      - npm-db

    networks:
      ipvlan3:
        ipv4_address: 192.168.1.2

  npm-db:
    image: "mariadb:latest"
    container_name: npm-db
    restart: unless-stopped
    environment:
      MARIADB_ROOT_PASSWORD_FILE: /run/secrets/mysql_root_password
      MARIADB_DATABASE: 'npm'
      MARIADB_USER: 'npm'
      MARIADB_PASSWORD_FILE: /run/secrets/db_mysql_password
    
    secrets:
      - mysql_root_password
      - db_mysql_password

    volumes:
      - ./mysql:/var/lib/mysql

    networks:
      ipvlan3:
        ipv4_address: 192.168.2.3

secrets:
  db_mysql_password:
    file: .db_mysql_password.txt
  mysql_root_password:
    file: .mysql_root_password.txt

networks:
  ipvlan3:
    driver: ipvlan
    driver_opts:
      parent: ens18
      ipvlan_mode: l3
    ipam:
      config:
        - subnet: 192.168.1.0/24
        - subnet: 192.168.2.0/24
    external: true

IPVLAN3-Working

DONT FORGET TO ADD IN THE NETWORKS MANUALLY(see "IPVLAN L3" tab) under "Docker"
AND ADD IN THE SECRETS AS ABOVE
version: "3.8"
services:
  npm-app:
    image: 'jc21/nginx-proxy-manager:latest'
    container_name: npm-app
    restart: unless-stopped
    ports:
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    environment:
      DB_MYSQL_HOST: "npm-db"
      DB_MYSQL_PORT: 3306
      DB_MYSQL_USER: "npm"
      DB_MYSQL_PASSWORD__FILE: /run/secrets/db_mysql_password
      DB_MYSQL_NAME: "npm"
      # Uncomment the line below if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
       
    secrets:
      - db_mysql_password    
    
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

    depends_on:
      - npm-db

    networks:
      ipvlan3:
        ipv4_address: 192.168.94.4

  npm-db:
    image: "mariadb:latest"
    container_name: npm-db
    restart: unless-stopped
    environment:
      MARIADB_ROOT_PASSWORD_FILE: /run/secrets/mysql_root_password
      MARIADB_DATABASE: 'npm'
      MARIADB_USER: 'npm'
      MARIADB_PASSWORD_FILE: /run/secrets/db_mysql_password
    
    secrets:
      - mysql_root_password
      - db_mysql_password

    volumes:
      - ./mysql:/var/lib/mysql

    networks:
      ipvlan3:
        ipv4_address: 192.168.95.4

secrets:
  db_mysql_password:
    file: .db_mysql_password.txt
  mysql_root_password:
    file: .mysql_root_password.txt

networks:
  ipvlan3:
    driver: ipvlan
    driver_opts:
      parent: eth0
      ipvlan_mode: l3
    ipam:
      config:
        - subnet: 192.168.94.0/24
        - subnet: 192.168.95.0/24
    external: true