前端和后端使用HTTPS和一个IP的Nginx。

huangapple
go评论102阅读模式
英文:

Frontend and Backend with HTTPS and one IP nginx

问题

I have a pretty simple project, with a backend in Django and a frontend in React. The front end is hosted on Netlify with a custom-bought domain and has an HTTPS security layer. The Django app is hosted on a DIgitalOcean Droplet and uses docker-compose. Initially, it used to use HTTP, but there were problems with the browser that did not allow that.

So, I am trying to put HTTPS also in the backend. I am trying to add nginx as a proxy to my docker-compose, and that looks fine, the problem seems to be that I cannot use the same domain to use let's encrypt to secure my connection.

I mean, let's say my domain is exaple.com, I try to use api.exaple.com, as suggested in other StackOverflow questions, but this seems not to be working. I tried to add the domain to digital ocean, and modify the settings on GoDaddy DNS (but it keeps not allowing them ).

For reference, here is the docker-compose file:

  1. version: "3.9"
  3. services:
  4.   db: 
  5.     ...
  7.   redis: 
  8.     ...
  10.   my_table:
  11.     container_name: my_table
  12.     build: .
  13.     command: ["python", "-m", "gunicorn", "--bind", "0.0.0.0:5000", "-c", "gunicorn.conf.py", "mytable.wsgi"]
  14.     volumes:
  15.       - .:/api
  16.     ports:
  17.       - "5000:5000"
  18.     depends_on:
  19.       - db
  20.       - redis
  22.   celery:
  23.     ...
  25.   nginx: 
  26.     build: ./nginx
  27.     ports: 
  28.       - 80:80
  29.       - 443:443
  30.     restart: always
  31.     volumes:
  32.       - ./nginx/conf/:/etc/nginx/conf.d/:ro
  33.       - ./certbot/www:/var/www/certbot/:ro
  34.     depends_on:
  35.       - my_table
  37.   certbot:
  38.     image: certbot/certbot:latest
  39.     volumes:
  40.       - ./certbot/www/:/var/www/certbot/:rw
  42. volumes:
  43.   my_table_postgres_db:
  44.   redis_data:

And the default.conf:

  1. server {
  2.     listen 80;
  3.     listen [::]:80;
  5.     server_name api.my-table.it www.api.my-table.it;
  6.     server_tokens off;
  8.     location /.well-known/acme-challenge/ {
  9.         root /var/www/certbot;
  10.     }
  12.     location / {
  13.         return 301 https://api.my-table.it$request_uri;
  14.     }
  15. }
  17. server {
  18.     listen 443 default_server ssl http2;
  19.     listen [::]:443 ssl http2;
  21.     server_name api.my-table.it;
  23.     ssl_certificate /etc/nginx/ssl/live/api.my-table.it/fullchain.pem;
  24.     ssl_certificate_key /etc/nginx/ssl/live/api.my-table.it/privkey.pem;
  25.     
  26.     location / {
  27.         # ...
  28.     }
  29. }

Please help me.

英文:

I have a pretty simple project, with a backend in Django and a frontend in React. The front end is hosted on Netlify with a custom-bought domain and has an HTTPS security layer. The Django app is hosted on a DIgitalOcean Droplet and uses docker-compose. Initially, it used to use HTTP, but there were problems with the browser that did not allow that.

So, I am trying to put HTTPS also in the backend. I am trying to add nginx as a proxy to my docker-compose, and that looks fine, the problem seems to be that I cannot use the same domain to use let's encrypt to secure my connection.

I mean, let's say my domain is exaple.com, I try to use api.exaple.com, as suggested in other StackOverflow questions, but this seems not to be working. I tried to add the domain to digital ocean, and modify the settings on GoDaddy DNS (but it keeps not allowing them ).

For reference, here is the docker-compose file:

  1. version: "3.9"
  3. services:
  4.   db: 
  5.     ...
  7.   redis: 
  8.     ...
  10.   my_table:
  11.     container_name: my_table
  12.     build: .
  13.     command: ["python", "-m", "gunicorn", "--bind", "0.0.0.0:5000", "-c", "gunicorn.conf.py", "mytable.wsgi"]
  14.     volumes:
  15.       - .:/api
  16.     ports:
  17.       - "5000:5000"
  18.     depends_on:
  19.       - db
  20.       - redis
  22.   celery:
  23.     ...
  25.   nginx: 
  26.     build: ./nginx
  27.     ports: 
  28.       - 80:80
  29.       - 443:443
  30.     restart: always
  31.     volumes:
  32.       - ./nginx/conf/:/etc/nginx/conf.d/:ro
  33.       - ./certbot/www:/var/www/certbot/:ro
  34.     depends_on:
  35.       - my_table
  37.   certbot:
  38.     image: certbot/certbot:latest
  39.     volumes:
  40.       - ./certbot/www/:/var/www/certbot/:rw
  42. volumes:
  43.   my_table_postgres_db:
  44.   redis_data:

And the default.conf:

  1.     listen 80;
  2.     listen [::]:80;
  4.     server_name api.my-table.it www.api.my-table.it;
  5.     server_tokens off;
  7.     location /.well-known/acme-challenge/ {
  8.         root /var/www/certbot;
  9.     }
  11.     location / {
  12.         return 301 https://api.my-table.it$request_uri;
  13.     }
  14. }
  16. server {
  17.     listen 443 default_server ssl http2;
  18.     listen [::]:443 ssl http2;
  20.     server_name api.my-table.it;
  22.     ssl_certificate /etc/nginx/ssl/live/api.my-table.it/fullchain.pem;
  23.     ssl_certificate_key /etc/nginx/ssl/live/api.my-table.it/privkey.pem;
  24.     
  25.     location / {
  26.     	# ...
  27.     }
  28. }

Please help me

答案1

得分: 1

你可以按照我的步骤自动更新CA密钥（Https）

  1. ## 步骤1：配置你的nginx.conf文件，填入你的电子邮件和域名，然后运行以下命令
  2. docker run -itd --name test --network=host \
  3. -v "${PWD}"/nginx.conf:/etc/nginx/conf.d/nginx.conf \
  4. -v "${PWD}"/nginx.sh:/etc/nginx/nginx.sh -v "${PWD}"/cronjob:/etc/cron.d/cronjob \
  5. -v "${PWD}"/:/etc/letsencrypt/ \
  6. williehao:nginx-cert:V20.04
  8. ## 步骤2：从你的主机上获取CA密钥
  9. ls ***（你的域名）
  11. ## 如果你没有看到CA密钥，请使用以下命令查找CA密钥的位置
  12. sudo find / -name fullchain.pem
  14. ## 步骤3：将CA密钥合并到另一个容器（例如Ant-Media-Server）中，该容器希望使用CA密钥：
  15. Docker run -v "${PWD}"/:/etc/letsencrypt/ ***

PS：更多详细信息参考

英文:

you can follow my step to automatically update CA key(Https)

  1. ## Step:1. Config your nginx.conf with your Email and Domain name and then Running 'docker run"
  2. docker run -itd --name test  --network=host  \
  3. -v "${PWD}"/nginx.conf:/etc/nginx/conf.d/nginx.conf \
  4. -v "${PWD}"/nginx.sh:/etc/nginx/nginx.sh -v "${PWD}"/cronjob:/etc/cron.d/cronjob \
  5. -v"${PWD}"/:/etc/letsencrypt/ \
  6. williehao:nginx-cert:V20.04
  8. ## Step:2. Get a CA Key from your host's direction
  9. ls *** (your domain name)
  11. ## if you didn't see CA key please use "find" command line to find CA key location
  12. sudo find / -name fullchain.pem 
  14. ## Step3: Combine CA key to another container(APP) which wants to use CA Key: (For example Ant-Media-Server)
  15. Docker run  -v "${PWD}"/:/etc/letsencrypt/  ***

PS: More detail reference

huangapple
  • 本文由 发表于 2023年2月27日 18:28:35
  • 转载请务必保留本文链接：https://go.coder-hub.com/75579286.html
  • docker
  • docker-compose
  • https
  • nginx
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定