ahmed-bakr1988/SaaS-PDF
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Update Nginx configuration for Let's Encrypt integration and adjust volume mounts

Browse Source
This commit is contained in:
Your Name
2026-03-18 00:32:37 +02:00
parent ca20413667
commit d4e7e223e6
2 changed files with 19 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docker-compose.prod.yml
View File

@@ -114,7 +114,8 @@ services:
volumes: volumes:
- ./nginx/nginx.prod.conf:/etc/nginx/conf.d/default.conf:ro - ./nginx/nginx.prod.conf:/etc/nginx/conf.d/default.conf:ro
- frontend_build:/usr/share/nginx/html:ro - frontend_build:/usr/share/nginx/html:ro
- ./nginx/ssl:/etc/nginx/ssl:ro - ./certbot/conf:/etc/letsencrypt:ro
- ./certbot/www:/var/www/certbot:ro
depends_on: depends_on:
- backend - backend
- frontend_build_step - frontend_build_step

23
nginx/nginx.prod.conf
View File

@@ -7,31 +7,40 @@ server {
server_name dociva.io www.dociva.io; server_name dociva.io www.dociva.io;
client_max_body_size 100M; client_max_body_size 100M;
# ACME challenge for Let's Encrypt renewal
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
# Redirect HTTP to HTTPS # Redirect HTTP to HTTPS
location / {
return 308 https://dociva.io$request_uri; return 308 https://dociva.io$request_uri;
}
} }
# Redirect www to non-www # Redirect www to non-www
server { server {
listen 443 ssl http2; listen 443 ssl;
http2 on;
server_name www.dociva.io; server_name www.dociva.io;
client_max_body_size 100M; client_max_body_size 100M;
ssl_certificate /etc/nginx/ssl/fullchain.pem; ssl_certificate /etc/letsencrypt/live/dociva.io/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/dociva.io/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
return 308 https://dociva.io$request_uri; return 308 https://dociva.io$request_uri;
} }
server { server {
listen 443 ssl http2; listen 443 ssl;
http2 on;
server_name dociva.io; server_name dociva.io;
client_max_body_size 100M; client_max_body_size 100M;
# SSL certificates (mount via certbot / Let's Encrypt) # SSL certificates (Let's Encrypt via certbot)
ssl_certificate /etc/nginx/ssl/fullchain.pem; ssl_certificate /etc/letsencrypt/live/dociva.io/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/dociva.io/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;