diff --git a/docker-compose.yml b/docker-compose.yml index 2f37dbf2..c22dd4e1 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -113,7 +113,7 @@ services: - certbotConf:/etc/letsencrypt - certbotChall:/var/www/certbot #command: certonly --test-cert --webroot -w /var/www/certbot --force-renewal --email yasienmeth@gmail.com -d mzansi-innovation-hub.co.za -d www.mzansi-innovation-hub.co.za --agree-tos - command: certonly --webroot -w /var/www/certbot --force-renewal --email yasienmeth@gmail.com -d mzansi-innovation-hub.co.za -d app.mzansi-innovation-hub.co.za -d api.mzansi-innovation-hub.co.za -d minio.mzansi-innovation-hub.co.za --agree-tos + command: certonly --webroot -w /var/www/certbot --force-renewal --email yasienmeth@gmail.com -d mzansi-innovation-hub.co.za -d app.mzansi-innovation-hub.co.za -d api.mzansi-innovation-hub.co.za -d minio.mzansi-innovation-hub.co.za -d monitor.mzansi-innovation-hub.co.za --agree-tos networks: - MIH-network depends_on: diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 350c9765..340cd30d 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -22,6 +22,7 @@ http { # server api:8080; # } + #================App Server================ server { listen 80; @@ -68,6 +69,7 @@ http { } } + #================API Server================ server { listen 80; @@ -114,6 +116,54 @@ http { } } + #================Monitor Server================ + server { + listen 80; + + server_name monitor.mzansi-innovation-hub.co.za; + + # # #Web App + # location / { + # proxy_pass http://MIH-API-Hub:8080/; + # } + + # location ~ /.well-known/acme-challenge/ { + # root /var/www/certbot; + # } + + return 301 https://monitor.mzansi-innovation-hub.co.za$request_uri; + } + + server { + listen 443 ssl; + http2 on; + # use the certificates + ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0003/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0003/privkey.pem; + server_name api.mzansi-innovation-hub.co.za; + root /var/www/html; + index index.php index.html index.htm; + + # To allow special characters in headers + ignore_invalid_headers off; + # Allow any size file to be uploaded. + # Set to a value such as 1000m; to restrict file size to a specific value + client_max_body_size 0; + # To disable buffering + proxy_buffering off; + proxy_request_buffering off; + + # Web Api + location / { + proxy_pass http://MIH-Monitor:9443/; + } + + location ~ /.well-known/acme-challenge/ { + root /var/www/certbot; + } + } + + #================File Server================ server { listen 80;