509d96ce83
- Use a single Dockerfile for all Zeppelin services
- Add a Dockerfile in project root that can be used by
app hosting services
- Provide a standalone and lightweight prod setup
- Standalone is the same as the old setup, with mysql+nginx
- Lightweight only runs bot+backend+dash, no mysql/nginx
- Remove mounted mysql data folders for dev and prod
- This resolves permission issues caused by the mount
- The mysql service uses a regular named volume now
- Simplify .env options and clearly separate different prod setups
- Remove update.sh
- Different setups require different update procedures, so a common
update.sh no longer works
37 lines
1.1 KiB
Text
37 lines
1.1 KiB
Text
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
server_name _STANDALONE_DOMAIN_;
|
|
|
|
# Using a variable here stops nginx from crashing if the dev container is restarted or becomes otherwise unavailable
|
|
set $backend_upstream "http://api:3001";
|
|
set $dashboard_upstream "http://dashboard:3002";
|
|
|
|
location / {
|
|
# Using a variable in proxy_pass also requires resolver to be set.
|
|
# This is the address of the internal docker compose DNS server.
|
|
resolver 127.0.0.11;
|
|
proxy_pass $dashboard_upstream$uri$is_args$args;
|
|
}
|
|
|
|
location /api {
|
|
# Remove /api/ from the beginning when passing the path to the API process
|
|
rewrite /api(/.*)$ $1 break;
|
|
|
|
resolver 127.0.0.11;
|
|
proxy_pass $backend_upstream$uri$is_args$args;
|
|
proxy_redirect off;
|
|
|
|
client_max_body_size 200M;
|
|
}
|
|
|
|
ssl_certificate /etc/ssl/certs/zeppelin-self-signed-cert.pem;
|
|
ssl_certificate_key /etc/ssl/private/zeppelin-self-signed-cert.key;
|
|
|
|
ssl_session_timeout 1d;
|
|
ssl_session_cache shared:MozSSL:10m;
|
|
ssl_session_tickets off;
|
|
|
|
ssl_protocols TLSv1.3;
|
|
ssl_prefer_server_ciphers off;
|
|
}
|