问Nginx https发布坞-撰写

EN

version: '3'
services:
nginx:
restart: always
image: nginx:latest
container_name: nginx
volumes:
  - ./nginx.conf:/home/comas/COMAS/COMAS-Docker/nginx.conf
  - ./ssl:/home/comas/COMAS/COMAS-Docker/certs/
ports:
  - "80:80"
  - "443:443"
  - "5000:5000"
  - "3000:3000"
networks:
  - ephemeris-public
depends_on:
  - api
  - ephemeris-web
db:
restart: always
image: mysql:latest
environment:
  MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASS}
  MYSQL_USER: ${MYSQL_USER_NAME}
  MYSQL_PASS: ${MYSQL_USER_PASS}
  MYSQL_DATABASE: ${MYSQL_DB_NAME}
volumes:
  - db-datavolume:/var/lib/mysql
ports:
  - "3306:3306"
networks:
  - api
api:
image: localhost:6969/comas-api:latest
expose:
  - "5000"
volumes:
  - ${API_LOCATION}:/app
depends_on:
  - db
networks:
  - api
  - ephemeris-public
  ephemeris-web:
  image: localhost:6969/ephemeris-ui:latest
  command: npm start
  expose:
  - "443"
environment:
  NODE_TLS_REJECT_UNAUTHORIZED: 0
  NODE_ENV: 'production'
  #    volumes:
  # - ${EPHEMERIS_UI_LOCATION}:/app
  networks:
  - ephemeris-public
  depends_on:
  - api
  portainer:
  image: portainer/portainer
  restart: always
  user: "${DOCKER_UID}:${DOCKER_GID}"
  networks:
  - ephemeris-public
  ports:
  - "9000:9000"
  - "8000:8000"
  volumes:
  - /var/run/docker.sock:/var/run/docker.sock
  - portainer_data:/portainer_data
  volumes:
  db-datavolume:
  portainer_data:
  networks:
  ephemeris-public:
  api:

# Prints everything going wrong to standard error output
error_log stderr;

events {
    worker_connections  4096;  ## Default: 1024
}

http {
    # Prints everything nginx is doing to standard output
    access_log /dev/stdout;

    # Location of the API
    upstream docker-api {
        server api:5000;
    }

    # Location of the Ephemeris interface
    upstream docker-ephemeris-web {
        server ephemeris-web:443;
    }

    # Grants access to ephemeris over port 443 (HTTPS)
    server {
        listen 443;
        listen [::]:443;

        ssl on;
        ssl_certificate /home/comas/COMAS/nginx/bundle.crt;
        ssl_certificate_key /home/comas/COMAS/nginx/ephermis.key;

        root /var/www/html;
        server_name ephemeris.ecrl.organization.edu;

        location / {
            try_files $uri $uri/ =404;
        }
    }

    # Redirect to https(HTTPS)
    server {
        listen 80;
        listen [::]:80;

        server_name ephemeris.ecrl.organization.edu;
        return 301 https://ephemeris.ecrl.organization.edu;
    }

    # Grants access to ephemeris over port 3000, its default port
    server {
        listen 443;

        location / {
            proxy_pass https://docker-ephemeris-web;
        }
    }

    server {
        listen 5000;
        location / {
            # Aight if we're being honest I just slapped everything on here until it worked, I'll fix it up later
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-NginX-Proxy true;
            proxy_pass https://docker-api;
            proxy_ssl_session_reuse off;
            proxy_ssl_verify off;
            proxy_set_header Host $https_host;
            proxy_set_header X_FORWARDED_PROTO https;
            proxy_redirect off;
        }
    }
}