From a52e75186185d25dad8bb0ddf42f869ddeb4d26c Mon Sep 17 00:00:00 2001
From: Michel Jung <michel.jung89@gmail.com>
Date: Sat, 18 Sep 2021 13:02:56 +0200
Subject: [PATCH] Add SCP server for uploading client files

Fixes #180
---
 .../faf-client-upload/faf-client-upload.env   |  4 ++++
 config.template/faf-traefik/traefik.yml       |  2 ++
 docker-compose.yml                            | 21 +++++++++++++++++++
 3 files changed, 27 insertions(+)
 create mode 100644 config.template/faf-client-upload/faf-client-upload.env

diff --git a/config.template/faf-client-upload/faf-client-upload.env b/config.template/faf-client-upload/faf-client-upload.env
new file mode 100644
index 00000000..f983a3b8
--- /dev/null
+++ b/config.template/faf-client-upload/faf-client-upload.env
@@ -0,0 +1,4 @@
+AUTHORIZED_KEYS=
+DATADIR=/client
+USERID=1000
+GROUPID=1000
diff --git a/config.template/faf-traefik/traefik.yml b/config.template/faf-traefik/traefik.yml
index 3b41f779..c93add5d 100644
--- a/config.template/faf-traefik/traefik.yml
+++ b/config.template/faf-traefik/traefik.yml
@@ -8,6 +8,8 @@ entryPoints:
     address: ":80"
   web-secure:
     address: ":443"
+  ssh:
+    address: ":2222"
 
 # Listen for changes on docker and the dynamic configuration file
 providers:
diff --git a/docker-compose.yml b/docker-compose.yml
index 7b035c95..c18210e4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -428,6 +428,27 @@ services:
       - "traefik.http.routers.faf-user-service.tls.certresolver=default"
       - "traefik.http.services.faf-user-service.loadbalancer.server.port=8080"
 
+  #
+  # An SCP server that allows uploading client update files.
+  #
+  faf-client-upload:
+    container_name: faf-client-upload
+    image: eeacms/scp-server
+    networks:
+      faf:
+        aliases:
+          - "faf-client-upload"
+    restart: unless-stopped
+    volumes:
+      - ./data/content/client:/client
+    env_file: ./config/faf-client-upload/faf-client-upload.env
+    labels:
+      - "traefik.enable=true"
+      - "traefik.tcp.routers.faf-client-upload.rule=HostSNI(`client-upload.${DOMAINNAME}`)"
+      - "traefik.tcp.routers.faf-client-upload.entryPoints=ssh"
+      - "traefik.tcp.routers.faf-client-upload.service=faf-client-upload"
+      - "traefik.tcp.services.faf-client-upload.loadbalancer.server.port=22"
+
 networks:
   faf:
     driver: bridge