work on xai-corp vm servers

dockerfiles/sslproxy/Dockerfile

@@ -0,0 +1,4 @@
+FROM nginx:alpine
+
+COPY ./nginx.conf /etc/nginx/nginx.conf
+COPY ./host.conf /etc/nginx/conf.d/host.conf

dockerfiles/sslproxy/docker-compose.prod.yml

@@ -0,0 +1,7 @@
+---
+version: '2'
+services:
+  app:
+    restart: always
+    volumes:
+      - /opt/shared/fileserver:/www/data:ro

dockerfiles/sslproxy/docker-compose.yml

@@ -0,0 +1,15 @@
+---
+version: '2'
+services:
+  app:
+    restart: always
+    image: "sslproxy:latest"
+    build:
+      context: .
+      dockerfile: Dockerfile
+
+    volumes:
+      - /etc/letsencrypt:/etc/letsencrypt:ro
+    ports:
+#       - "80:80"
+       - "443:443"

dockerfiles/sslproxy/host.conf

@@ -0,0 +1,93 @@
+# fs.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name fs.xai-corp.net;
+    ssl_certificate     /etc/letsencrypt/live/fs.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/fs.xai-corp.net/privkey.pem;
+
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_pass http://192.168.2.41:8081;
+    }
+
+}
+
+# git.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name git.xai-corp.net docker.dev;
+    ssl_certificate     /etc/letsencrypt/live/git.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/git.xai-corp.net/privkey.pem;
+
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_pass http://192.168.2.41:10080;
+    }
+
+}
+
+# jenkins.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name jenkins.xai-corp.net docker.dev;
+    ssl_certificate     /etc/letsencrypt/live/jenkins.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/jenkins.xai-corp.net/privkey.pem;
+
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_pass http://192.168.2.41:8080;
+    }
+
+}
+
+# dkui.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name dkui.xai-corp.net docker.dev;
+    ssl_certificate     /etc/letsencrypt/live/dkui.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/dkui.xai-corp.net/privkey.pem;
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_set_header Connection $http_connection;
+        proxy_pass http://192.168.2.41:9000;
+    }
+
+}
+
+# sql.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name sql.xai-corp.net docker.dev;
+    ssl_certificate     /etc/letsencrypt/live/sql.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/sql.xai-corp.net/privkey.pem;
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_pass http://192.168.2.41:9000;
+    }
+
+}
+
+# www.xai-corp.net
+server {
+    listen  443 ssl;
+    server_name www.xai-corp.net xai-corp.net docker.dev;
+    ssl_certificate     /etc/letsencrypt/live/www.xai-corp.net/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/www.xai-corp.net/privkey.pem;
+    #Strict-Transport-Security: max-age=15768000
+    add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
+
+    location / {
+        proxy_pass http://192.168.2.41:9000;
+    }
+
+}

dockerfiles/sslproxy/nginx.conf

@@ -0,0 +1,32 @@
+
+user  nginx;
+worker_processes  1;
+
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    #gzip  on;
+
+    include /etc/nginx/conf.d/*.conf;
+}

dockerfiles/sslproxy/testdata/_first.txt

@@ -0,0 +1 @@
+something elses.