Reverse proxy configurations for nginx, for development as well as production

angular/nginx/conf.d.prod/default

@@ -0,0 +1,59 @@
+worker_processes  4;
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    server {
+        listen 443 ssl;
+        server_name  panomicon.nibiohn.go.jp;
+        ssl_certificate /etc/nginx/cert/xxx.crt
+        ssl_certificate_key /etc/nginx/cert/xxx.key
+
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+        include /etc/nginx/mime.types;
+
+        gzip on;
+        gzip_min_length 1000;
+        gzip_proxied expired no-cache no-store private auth;
+        gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;
+
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+
+        # Reverse proxy for angular to talk to scalatra
+        location /json {
+            proxy_pass http://scalatra:8888;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection 'upgrade';
+            proxy_set_header Host $host:4200;
+            proxy_cache_bypass $http_upgrade;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+        }
+    }
+
+     server {
+        listen 443 ssl;
+        server_name  panomicon-auth.nibiohn.go.jp;
+        ssl_certificate /etc/nginx/cert/xxx.crt
+        ssl_certificate_key /etc/nginx/cert/xxx.key
+
+        # Forward all requests to fusionauth
+        location / {
+            proxy_pass http://fusionauth:9011;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header Host $host;
+            proxy_http_version 1.1;
+            proxy_set_header X-Forwarded-Proto $scheme;
+       }
+    }
+
+}

angular/nginx/conf.d/default

@@ -0,0 +1,41 @@
+worker_processes  1;
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    server {
+        listen 80;
+        server_name  localhost;
+
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+        include /etc/nginx/mime.types;
+
+        gzip on;
+        gzip_min_length 1000;
+        gzip_proxied expired no-cache no-store private auth;
+        gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;
+
+        # location = / {
+        #     try_files /index.html =404;
+        # }
+
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+
+        # Docker nginx reverse proxy proxy_pass entry
+        location /json {
+            proxy_pass http://scalatra:8888;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection 'upgrade';
+            proxy_set_header Host $host:4200;
+            proxy_cache_bypass $http_upgrade;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+    }
+}

angular/nginx/default.conf

@@ -1,29 +1 @@
-worker_processes  1;
-
-events {
-    worker_connections  1024;
-}
-
-http {
-    server {
-        listen 80;
-        server_name  localhost;
-
-        root   /usr/share/nginx/html;
-        index  index.html index.htm;
-        include /etc/nginx/mime.types;
-
-        gzip on;
-        gzip_min_length 1000;
-        gzip_proxied expired no-cache no-store private auth;
-        gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;
-
-        # location = / {
-        #     try_files /index.html =404;
-        # }
-
-        location / {
-            try_files $uri $uri/ /index.html;
-        }
-    }
-}
+include conf.d/default;

docker-compose-prod.yml

@@ -77,10 +77,27 @@ services:
     volumes:
       - ${T_DATA_DIR}:/data
 
+  node:
+     build:
+       context: angular/ 
+       dockerfile: "Dockerfile"
+     depends_on:
+       - scalatra
+       - fusionauth
+     ports:
+       - "4200:80"
+     tty: true
+     restart: unless-stopped
+     networks:
+       - panomicon_net
+     volumes:
+       - ./angular/nginx/conf.d:/etc/nginx/conf.d
+
 networks:
   panomicon_net:
     driver: bridge
 
 volumes:
   fusionauth_db_data:
   fusionauth_config:
+