b67b3c35b7
Production containers now copy the Zeppelin source files at build-time rather than using a shared volume. This means fewer permission issues and backend/dashboard builds only have to run once at build-time, not every time the containers are started. Docs in PRODUCTION.md have been updated accordingly.
39 lines
1 KiB
Text
39 lines
1 KiB
Text
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
server_name _DOCKER_PROD_DOMAIN_;
|
|
|
|
root /var/www;
|
|
|
|
location / {
|
|
index index.html;
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
|
|
# Using a variable here stops nginx from crashing if the dev container is restarted or becomes otherwise unavailable
|
|
set $backend_upstream "http://api:_API_PORT_";
|
|
|
|
location /api {
|
|
# Remove /api/ from the beginning when passing the path to the API process
|
|
rewrite /api(/.*)$ $1 break;
|
|
|
|
# Using a variable in proxy_pass also requires resolver to be set.
|
|
# This is the address of the internal docker compose DNS server.
|
|
resolver 127.0.0.11;
|
|
|
|
proxy_pass $backend_upstream$uri$is_args$args;
|
|
proxy_redirect off;
|
|
|
|
client_max_body_size 200M;
|
|
}
|
|
|
|
ssl_certificate /etc/ssl/certs/zeppelin-self-signed-cert.pem;
|
|
ssl_certificate_key /etc/ssl/private/zeppelin-self-signed-cert.key;
|
|
|
|
ssl_session_timeout 1d;
|
|
ssl_session_cache shared:MozSSL:10m;
|
|
ssl_session_tickets off;
|
|
|
|
ssl_protocols TLSv1.3;
|
|
ssl_prefer_server_ciphers off;
|
|
}
|