Feat : https 인증서 설정

Author: milowon

docker-compose.common.yml

@@ -18,7 +18,7 @@ services:
       - "443:443"
     volumes:
       - /home/ubuntu/tinybite/nginx/default.conf:/etc/nginx/conf.d/default.conf
-      - /home/ubuntu/tinybite/data/certbot/conf:/etc/letsencrypt
+      - /etc/letsencrypt:/etc/letsencrypt
       - /home/ubuntu/tinybite/data/certbot/www:/var/www/certbot
     restart: always
     network_mode: host

nginx/default.conf

@@ -7,8 +7,22 @@ server {
     }
 
     location / {
-        proxy_pass http://tinybite-api:8080;
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name tinybite.duckdns.org;
+
+    ssl_certificate /etc/letsencrypt/live/tinybite.duckdns.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/tinybite.duckdns.org/privkey.pem;
+
+    location / {
+        proxy_pass http://localhost:8080;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
     }
 }