add abcapi to sslproxy

This commit is contained in:
2017-12-31 13:00:40 -05:00
parent d6806a673e
commit 771dfabd69
9 changed files with 77 additions and 22 deletions

View File

@@ -1,18 +1,19 @@
---
# DOCKER_HOST=192.168.2.41:2376 docker-compose up -d
# docker login dkregistry.xai-corp.net:5000
# docker-compose build && docker push dkregistry.xai-corp.net:5000/sslproxy:2.0
# docker-compose build && docker push dkregistry.xai-corp.net:5000/sslproxy:2.1
# DOCKER_HOST=dkhost:2376 docker stack deploy --with-registry-auth -c docker-compose-prod.yml sslproxy
# DOCKER_HOST=dkhost:2376 docker stack ps sslproxy
version: '3'
services:
app:
image: "dkregistry.xai-corp.net:5000/sslproxy:2.0"
image: "dkregistry.xai-corp.net:5000/sslproxy:2.1"
volumes:
- /opt/shared/letsencrypt-2:/etc/letsencrypt:ro
ports:
- "443:443"
- "80:80" # required for letsencrypt
# logging:
# driver: syslog
@@ -37,7 +38,7 @@ services:
mode: global
restart_policy:
condition: any
delay: 5s
delay: 6s
max_attempts: 10
# update_config:
# parallelism: 2
@@ -50,3 +51,15 @@ services:
labels:
net.xai-corp.sslproxy.description: proxy ssl calls to non ssl containers
networks:
- ingress
- prod-private
networks:
ingress:
external:
name: ingress
prod-private:
external:
name: prod-private

View File

@@ -1,7 +1,7 @@
---
# DOCKER_HOST=192.168.2.41:2376 docker-compose up -d
# docker login dkregistry.xai-corp.net:5000
# docker-compose build && docker push dkregistry.xai-corp.net:5000/sslproxy:2.0
# docker-compose build && docker push dkregistry.xai-corp.net:5000/sslproxy:2.1
# DOCKER_HOST=dkhost:2376 docker stack deploy --with-registry-auth -c docker-compose.yml sslproxy
# DOCKER_HOST=dkhost:2376 docker stack ps sslproxy
@@ -9,7 +9,7 @@ version: '3'
services:
app:
image: "dkregistry.xai-corp.net:5000/sslproxy:2.0"
image: "dkregistry.xai-corp.net:5000/sslproxy:2.1"
build:
context: .
dockerfile: Dockerfile

View File

@@ -0,0 +1,14 @@
server {
listen 443 ssl ipv6only=off;
server_name abcapi.xai-corp.net;
ssl_certificate /etc/letsencrypt/live/xai-corp.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xai-corp.net/privkey.pem;
#Strict-Transport-Security: max-age=15768000
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
location / {
proxy_pass http://abc-api_nginx;
}
}