jmtrivial/agenda_culturel
4
4
Fork 0
Code Issues 68 Pull Requests 1 Projects 1 Releases Wiki Activity

replace traefik

Browse Source
This commit is contained in:
godd0t 2023-05-10 16:33:37 +02:00
parent 459fe09307
commit d4a908357b
2 changed files with 34 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
deployment/scripts/nginx/nginx.conf
View File

@ -3,14 +3,28 @@ events {}
http { http {
include /etc/nginx/mime.types; include /etc/nginx/mime.types;
default_type application/octet-stream; default_type application/octet-stream;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log; upstream backend {
server backend:8000;
}
server { server {
listen 80; listen 80;
location ~ ^/(images|javascript|js|css|flash|media|static)/ {
autoindex on; location / {
alias /usr/src/app/; proxy_pass http://backend;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /static/ {
alias /usr/src/app/static/;
}
location /media/ {
alias /usr/src/app/media/;
} }
} }
} }

27
docker-compose.prod.yml
View File

@ -18,9 +18,8 @@ services:
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.${APP_NAME}-backend.rule=Host(`${APP_DOMAIN}`)" - "traefik.http.routers.${APP_NAME}-backend.rule=Host(`${APP_DOMAIN}`)"
- "traefik.http.routers.${APP_NAME}-backend.entrypoints=web-secure" - "traefik.http.routers.${APP_NAME}-backend.entrypoints=web"
- "traefik.http.services.${APP_NAME}-backend.loadbalancer.server.port=${APP_PORT}" - "traefik.http.services.${APP_NAME}-backend.loadbalancer.server.port=${APP_PORT}"
- "traefik.http.routers.${APP_NAME}-backend.tls.certresolver=letsencrypt"
env_file: .env env_file: .env
expose: expose:
- "${APP_PORT:-8000}" - "${APP_PORT:-8000}"
@ -76,9 +75,11 @@ services:
- media_files:/usr/src/app/media - media_files:/usr/src/app/media
labels: labels:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.${APP_NAME}-nginx.rule=Host(`${APP_HOST}`) && (PathPrefix(`/static`) && PathPrefix(`/media`))" - "traefik.http.routers.${APP_NAME}-nginx.rule=Host(`${APP_DOMAIN}`) && PathPrefix(`/static`,`/media`)"
- "traefik.http.routers.${APP_NAME}-nginx.entrypoints=web" - "traefik.http.routers.${APP_NAME}-nginx.entrypoints=web"
- "traefik.http.services.${APP_NAME}-nginx.loadbalancer.server.port=80" - "traefik.http.services.${APP_NAME}-nginx.loadbalancer.server.port=80"
expose:
- "80"
depends_on: depends_on:
- backend - backend
@ -86,24 +87,24 @@ services:
image: traefik:v2.5 image: traefik:v2.5
container_name: "${APP_NAME}-traefik" container_name: "${APP_NAME}-traefik"
command: command:
- "--api.insecure=true"
- "--providers.docker=true" - "--providers.docker=true"
- "--providers.docker.exposedbydefault=false" - "--providers.docker.exposedbydefault=false"
- "--entrypoints.web.address=:80" - "--entrypoints.web.address=:80"
- "--entrypoints.web-secure.address=:443" - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
- "--accesslog=true" - "--entrypoints.web.http.redirections.entryPoint.scheme=https"
- "--accesslog.filePath=/logs/access.log" - "--entrypoints.websecure.address=:443"
- "--certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}" - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
- "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json" - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true" - "--certificatesresolvers.myresolver.acme.email=${LETSENCRYPT_EMAIL}"
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web" - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
ports: ports:
- "80:80" - "80:80"
- "443:443" - "443:443"
volumes: volumes:
- "/var/run/docker.sock:/var/run/docker.sock" - "/var/run/docker.sock:/var/run/docker.sock"
- "./letsencrypt:/letsencrypt" - letsencrypt:/letsencrypt
networks:
- default
volumes: volumes:
static_files: static_files: