Skip to content

Instantly share code, notes, and snippets.

@bjesuiter

bjesuiter/Readme.md

Last active April 23, 2019 13:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bjesuiter/5ac32386ec3a4d38c41fa9bef54f923c to your computer and use it in GitHub Desktop.
Save bjesuiter/5ac32386ec3a4d38c41fa9bef54f923c to your computer and use it in GitHub Desktop.
Download ZIP
Evert Ramos Reverse Proxy - Backend Service Connection problem (Issue 144)
Raw
Readme.md

Description

This Gist contains some more debugging information for the following issue:
evertramos/nginx-proxy-automation#144

Notes

  • My nginx-web container is called bnware-reverse-nginx-web
Raw
default.conf
# Command: bjesuiter@v22015113095628982:~/docker-nginx-reverse-proxy-data$ sudo cat conf.d/default.conf
# If we receive X-Forwarded-Proto, pass it through; otherwise, pass along the
# scheme used to connect to this server
map $http_x_forwarded_proto $proxy_x_forwarded_proto {
default $http_x_forwarded_proto;
'' $scheme;
}
# If we receive X-Forwarded-Port, pass it through; otherwise, pass along the
# server port the client connected to
map $http_x_forwarded_port $proxy_x_forwarded_port {
default $http_x_forwarded_port;
'' $server_port;
}
# If we receive Upgrade, set Connection to "upgrade"; otherwise, delete any
# Connection header that may have been passed to this server
map $http_upgrade $proxy_connection {
default upgrade;
'' close;
}
# Apply fix for very long server names
server_names_hash_bucket_size 128;
# Default dhparam
# Set appropriate X-Forwarded-Ssl header
map $scheme $proxy_x_forwarded_ssl {
default off;
https on;
}
gzip_types text/plain text/css application/javascript application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
log_format vhost '$host $remote_addr - $remote_user [$time_local] '
'"$request" $status $body_bytes_sent '
'"$http_referer" "$http_user_agent"';
access_log off;
# HTTP 1.1 support
proxy_http_version 1.1;
proxy_buffering off;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $proxy_connection;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
proxy_set_header X-Forwarded-Ssl $proxy_x_forwarded_ssl;
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
# Mitigate httpoxy attack (see README for details)
proxy_set_header Proxy "";
server {
server_name _; # This is just an invalid value which will never trigger on a real hostname.
listen 80;
access_log /var/log/nginx/access.log vhost;
return 503;
}
server {
server_name _; # This is just an invalid value which will never trigger on a real hostname.
listen 443 ssl http2;
access_log /var/log/nginx/access.log vhost;
return 503;
ssl_session_tickets off;
ssl_certificate /etc/nginx/certs/default.crt;
ssl_certificate_key /etc/nginx/certs/default.key;
}
# nextcloud.avil.io
upstream nextcloud.avil.io {
# Cannot connect to network of this container
server 127.0.0.1 down;
## Can be connected with "webproxy" network
# vserv-nextcloud
server 172.18.0.3:80;
}
server {
server_name nextcloud.avil.io;
listen 80 ;
access_log /var/log/nginx/access.log vhost;
return 301 https://$host$request_uri;
}
server {
server_name nextcloud.avil.io;
listen 443 ssl http2 ;
access_log /var/log/nginx/access.log vhost;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS';
ssl_prefer_server_ciphers on;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_certificate /etc/nginx/certs/nextcloud.avil.io.crt;
ssl_certificate_key /etc/nginx/certs/nextcloud.avil.io.key;
ssl_dhparam /etc/nginx/certs/nextcloud.avil.io.dhparam.pem;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/nginx/certs/nextcloud.avil.io.chain.pem;
add_header Strict-Transport-Security "max-age=31536000" always;
include /etc/nginx/vhost.d/default;
location / {
proxy_pass http://nextcloud.avil.io;
}
}
Raw
docker-inspect-nginx-gen.json
[
{
"Id": "d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790",
"Created": "2019-04-23T13:01:01.478266176Z",
"Path": "/usr/local/bin/docker-gen",
"Args": [
"-notify-sighup",
"bnware-reverse-nginx-web",
"-watch",
"-wait",
"5s:30s",
"/etc/docker-gen/templates/nginx.tmpl",
"/etc/nginx/conf.d/default.conf"
],
"State": {
"Status": "exited",
"Running": false,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 0,
"ExitCode": 2,
"Error": "",
"StartedAt": "2019-04-23T13:06:14.995054479Z",
"FinishedAt": "2019-04-23T13:06:15.109306481Z"
},
"Image": "sha256:8159de90f0e869b28379926da4a20cee502d56139eb966d2bdb288b7924c40d0",
"ResolvConfPath": "/var/lib/docker/containers/d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790/hostname",
"HostsPath": "/var/lib/docker/containers/d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790/hosts",
"LogPath": "/var/lib/docker/containers/d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790/d1a3b326569aa9af8b17df97417952cc6e5115c74faf78dc2b3c0a0ff61b9790-json.log",
"Name": "/bnware-reverse-nginx-gen",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": [
"/home/bjesuiter/docker-nginx-reverse-proxy-data/conf.d:/etc/nginx/conf.d:rw",
"/home/bjesuiter/vserv-reverse-proxy/nginx.tmpl:/etc/docker-gen/templates/nginx.tmpl:ro",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/certs:/etc/nginx/certs:ro",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/vhost.d:/etc/nginx/vhost.d:rw",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/htpasswd:/etc/nginx/htpasswd:ro",
"/var/run/docker.sock:/tmp/docker.sock:ro",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/html:/usr/share/nginx/html:rw"
],
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {
"max-file": "10",
"max-size": "2m"
}
},
"NetworkMode": "webproxy",
"PortBindings": {},
"RestartPolicy": {
"Name": "always",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": [],
"CapAdd": null,
"CapDrop": null,
"Dns": null,
"DnsOptions": null,
"DnsSearch": null,
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "shareable",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": null,
"DeviceCgroupRules": null,
"DiskQuota": 0,
"KernelMemory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": 0,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/1a1f510dab0876abad18a8a55d8b2da435306f2a9b3366920363d2c5f0b75ee9-init/diff:/var/lib/docker/overlay2/3f9ab6bc7775cb1e611065a030b40486e3f75c428d917ab12a0f801b216edd8f/diff:/var/lib/docker/overlay2/4ac9fa0352f6910cfbf5c9924c71fc4997320d65a32fddf6ee1d5c60878828d0/diff:/var/lib/docker/overlay2/3b933d2112bb8aab4ebcd06f641993cd8d9945651e474e86c37b06278a8861cd/diff",
"MergedDir": "/var/lib/docker/overlay2/1a1f510dab0876abad18a8a55d8b2da435306f2a9b3366920363d2c5f0b75ee9/merged",
"UpperDir": "/var/lib/docker/overlay2/1a1f510dab0876abad18a8a55d8b2da435306f2a9b3366920363d2c5f0b75ee9/diff",
"WorkDir": "/var/lib/docker/overlay2/1a1f510dab0876abad18a8a55d8b2da435306f2a9b3366920363d2c5f0b75ee9/work"
},
"Name": "overlay2"
},
"Mounts": [
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/htpasswd",
"Destination": "/etc/nginx/htpasswd",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/var/run/docker.sock",
"Destination": "/tmp/docker.sock",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/html",
"Destination": "/usr/share/nginx/html",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/conf.d",
"Destination": "/etc/nginx/conf.d",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/vserv-reverse-proxy/nginx.tmpl",
"Destination": "/etc/docker-gen/templates/nginx.tmpl",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/certs",
"Destination": "/etc/nginx/certs",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/vhost.d",
"Destination": "/etc/nginx/vhost.d",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
}
],
"Config": {
"Hostname": "d1a3b326569a",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"VERSION=0.7.3",
"DOWNLOAD_URL=https://github.com/jwilder/docker-gen/releases/download/0.7.3/docker-gen-alpine-linux-amd64-0.7.3.tar.gz",
"DOCKER_HOST=unix:///tmp/docker.sock"
],
"Cmd": [
"-notify-sighup",
"bnware-reverse-nginx-web",
"-watch",
"-wait",
"5s:30s",
"/etc/docker-gen/templates/nginx.tmpl",
"/etc/nginx/conf.d/default.conf"
],
"Image": "jwilder/docker-gen",
"Volumes": {
"/etc/docker-gen/templates/nginx.tmpl": {},
"/etc/nginx/certs": {},
"/etc/nginx/conf.d": {},
"/etc/nginx/htpasswd": {},
"/etc/nginx/vhost.d": {},
"/tmp/docker.sock": {},
"/usr/share/nginx/html": {}
},
"WorkingDir": "",
"Entrypoint": [
"/usr/local/bin/docker-gen"
],
"OnBuild": null,
"Labels": {
"com.docker.compose.config-hash": "aef4862a260ee5a0cd737636e811ef256f30d4d82daf4c61d0392726ff0d3409",
"com.docker.compose.container-number": "1",
"com.docker.compose.oneoff": "False",
"com.docker.compose.project": "vserv-reverse-proxy",
"com.docker.compose.service": "nginx-gen",
"com.docker.compose.version": "1.23.2",
"maintainer": "Jason Wilder <mail@jasonwilder.com>"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "ef24f2b85842efecf4428f883b21a0d1462d6e60d4d433ecd81bdc75d38631db",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/ef24f2b85842",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "",
"Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"MacAddress": "",
"Networks": {
"webproxy": {
"IPAMConfig": null,
"Links": null,
"Aliases": [
"d1a3b326569a",
"nginx-gen"
],
"NetworkID": "69ef5844b3fe8b97e336e1aa01799165fc8981b852cc077f8e9daa96ae514642",
"EndpointID": "",
"Gateway": "",
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "",
"DriverOpts": null
}
}
}
}
]
Raw
docker-network-inspect-webproxy.json
[
{
"Name": "webproxy",
"Id": "69ef5844b3fe8b97e336e1aa01799165fc8981b852cc077f8e9daa96ae514642",
"Created": "2019-03-25T00:35:47.92141621+01:00",
"Scope": "local",
"Driver": "bridge",
"EnableIPv6": false,
"IPAM": {
"Driver": "default",
"Options": {},
"Config": [
{
"Subnet": "172.18.0.0/16",
"Gateway": "172.18.0.1"
}
]
},
"Internal": false,
"Attachable": false,
"Ingress": false,
"ConfigFrom": {
"Network": ""
},
"ConfigOnly": false,
"Containers": {
"648ac4cd1c73a17f5d172099d8da1a41ace45fac9707169409599037d47e78f1": {
"Name": "vserv-nextcloud",
"EndpointID": "26014777660bf8285cd29c820f528eb374df5abd2f3866e23f65b11da699a4ee",
"MacAddress": "02:42:ac:12:00:03",
"IPv4Address": "172.18.0.3/16",
"IPv6Address": ""
},
"93dcc3524fcd42268155b7ec3a923016262d1267c0f4a2acd524a41dc7fd059e": {
"Name": "bnware-reverse-nginx-web",
"EndpointID": "7c2a4bf490330205c4eb70b2888c4db9b9d1f37b8913669ab6e3f632fcbd76f4",
"MacAddress": "02:42:ac:12:00:04",
"IPv4Address": "172.18.0.4/16",
"IPv6Address": ""
},
"b77e523dc84e897ba382986bdc5752a2f99f7ac5fb3ab3ecb38baeb87417e9fa": {
"Name": "bnware-reverse-nginx-letsencrypt",
"EndpointID": "0e259f6daa4a21cb1a20a480cef4752712ef8da3240d65015ee9449e2cc710a6",
"MacAddress": "02:42:ac:12:00:06",
"IPv4Address": "172.18.0.6/16",
"IPv6Address": ""
},
"f1e175bf951967d20d70b0b9c26b033b72a17dece2f09b12947b055b68051772": {
"Name": "shlink-url-shortener",
"EndpointID": "47aff2c737b59f6069ee92bcb9a557c12bc7c70c7e23351c37cce891b79462e7",
"MacAddress": "02:42:ac:12:00:02",
"IPv4Address": "172.18.0.2/16",
"IPv6Address": ""
}
},
"Options": {},
"Labels": {}
}
]
Raw
nginx-gen_logs.md

Command inside reverse proxy git repo: docker-compose logs bnware-reverse-nginx-gen

Output: ERROR: No such service: bnware-reverse-nginx-gen

Raw
nginx-web-inspect.json
[
{
"Id": "f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152",
"Created": "2019-04-22T11:16:22.212444109Z",
"Path": "nginx",
"Args": [
"-g",
"daemon off;"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 32179,
"ExitCode": 0,
"Error": "",
"StartedAt": "2019-04-22T11:16:26.477421648Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:27a188018e1847b312022b02146bb7ac3da54e96fab838b7db9f102c8c3dd778",
"ResolvConfPath": "/var/lib/docker/containers/f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152/hostname",
"HostsPath": "/var/lib/docker/containers/f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152/hosts",
"LogPath": "/var/lib/docker/containers/f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152/f2e9c4a8c1ae87fc91447420b42d83d18d5cd99c98d0d9c3a0441740f431c152-json.log",
"Name": "/bnware-reverse-nginx-web",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "docker-default",
"ExecIDs": null,
"HostConfig": {
"Binds": [
"/home/bjesuiter/docker-nginx-reverse-proxy-data/certs:/etc/nginx/certs:ro",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/htpasswd:/etc/nginx/htpasswd:ro",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/conf.d:/etc/nginx/conf.d:rw",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/vhost.d:/etc/nginx/vhost.d:rw",
"/home/bjesuiter/docker-nginx-reverse-proxy-data/html:/usr/share/nginx/html:rw"
],
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {
"max-file": "10",
"max-size": "4m"
}
},
"NetworkMode": "webproxy",
"PortBindings": {
"443/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "443"
}
],
"80/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "80"
}
]
},
"RestartPolicy": {
"Name": "always",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": [
],
"CapAdd": null,
"CapDrop": null,
"Dns": null,
"DnsOptions": null,
"DnsSearch": null,
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "shareable",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": null,
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": null,
"DeviceCgroupRules": null,
"DiskQuota": 0,
"KernelMemory": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": 0,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/a16c846a52386a54589cd862f8bf426c9cd2c26f8b42cefc7cbb6f43893a7165-init/diff:/var/lib/docker/overlay2/9364326ff51fbef29600c9efc9e4786df7a2e3eae02fb0ede9c5c1c8ad73e0eb/diff:/var/lib/docker/overlay2/1ff389c8897ab3151162a356abb34ba95863b7287bf84606c289c0329b9fdf41/diff:/var/lib/docker/overlay2/b6c54c5bd79db48a62f17e4f2a4d698a8bbc28cb8288f0542bb789356c13486a/diff",
"MergedDir": "/var/lib/docker/overlay2/a16c846a52386a54589cd862f8bf426c9cd2c26f8b42cefc7cbb6f43893a7165/merged",
"UpperDir": "/var/lib/docker/overlay2/a16c846a52386a54589cd862f8bf426c9cd2c26f8b42cefc7cbb6f43893a7165/diff",
"WorkDir": "/var/lib/docker/overlay2/a16c846a52386a54589cd862f8bf426c9cd2c26f8b42cefc7cbb6f43893a7165/work"
},
"Name": "overlay2"
},
"Mounts": [
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/certs",
"Destination": "/etc/nginx/certs",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/htpasswd",
"Destination": "/etc/nginx/htpasswd",
"Mode": "ro",
"RW": false,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/conf.d",
"Destination": "/etc/nginx/conf.d",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/vhost.d",
"Destination": "/etc/nginx/vhost.d",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
},
{
"Type": "bind",
"Source": "/home/bjesuiter/docker-nginx-reverse-proxy-data/html",
"Destination": "/usr/share/nginx/html",
"Mode": "rw",
"RW": true,
"Propagation": "rprivate"
}
],
"Config": {
"Hostname": "f2e9c4a8c1ae",
"Domainname": "",
"User": "",
"AttachStdin": false,
"AttachStdout": false,
"AttachStderr": false,
"ExposedPorts": {
"443/tcp": {
},
"80/tcp": {
}
},
"Tty": false,
"OpenStdin": false,
"StdinOnce": false,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"NGINX_VERSION=1.15.12-1~stretch",
"NJS_VERSION=1.15.12.0.3.1-1~stretch"
],
"Cmd": [
"nginx",
"-g",
"daemon off;"
],
"ArgsEscaped": true,
"Image": "nginx",
"Volumes": {
"/etc/nginx/certs": {
},
"/etc/nginx/conf.d": {
},
"/etc/nginx/htpasswd": {
},
"/etc/nginx/vhost.d": {
},
"/usr/share/nginx/html": {
}
},
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"com.docker.compose.config-hash": "6f5edef4e90ed7ef06805196659b65558d28c69e2f97e1e4bd6496dc705d8d28",
"com.docker.compose.container-number": "1",
"com.docker.compose.oneoff": "False",
"com.docker.compose.project": "vserv-reverse-proxy",
"com.docker.compose.service": "nginx-web",
"com.docker.compose.version": "1.23.2",
"com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy": "true",
"maintainer": "NGINX Docker Maintainers <docker-maint@nginx.com>"
},
"StopSignal": "SIGTERM"
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "12bd67705713fd104e974a1391d9609532fbffa6109ac1030e9882a027553240",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {
"443/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "443"
}
],
"80/tcp": [
{
"HostIp": "0.0.0.0",
"HostPort": "80"
}
]
},
"SandboxKey": "/var/run/docker/netns/12bd67705713",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "",
"Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "",
"IPPrefixLen": 0,
"IPv6Gateway": "",
"MacAddress": "",
"Networks": {
"webproxy": {
"IPAMConfig": null,
"Links": null,
"Aliases": [
"f2e9c4a8c1ae",
"nginx-web"
],
"NetworkID": "69ef5844b3fe8b97e336e1aa01799165fc8981b852cc077f8e9daa96ae514642",
"EndpointID": "23c938e5958f1df68ec4827f28df52acfdb9ece90851082a0b0b6dcbadbc72b2",
"Gateway": "172.18.0.1",
"IPAddress": "172.18.0.4",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:12:00:04",
"DriverOpts": null
}
}
}
}
]
Raw
reverse-proxy.env
#
# docker-compose-letsencrypt-nginx-proxy-companion
#
# A Web Proxy using docker with NGINX and Let's Encrypt
# Using the great community docker-gen, nginx-proxy and docker-letsencrypt-nginx-proxy-companion
#
# This is the .env file to set up your webproxy enviornment
#
# Your local containers NAME
#
NGINX_WEB=bnware-reverse-nginx-web
DOCKER_GEN=bnware-reverse-nginx-gen
LETS_ENCRYPT=bnware-reverse-nginx-letsencrypt
#
# Set the IP address of the external access Interface
#
IP=0.0.0.0
#
# Default Network
#
NETWORK=webproxy
# If you want to customize the created network, use the following variable
#NETWORK_OPTIONS="--opt encrypted=true"
#
# Service Network (Optional)
#
# In case you decide to add a new network to your services containers you can set this
# network as a SERVICE_NETWORK
#
# [WARNING] This setting was built to use our `start.sh` script or in that special case
# you could use the docker-composer with our multiple network option, as of:
# `docker-compose -f docker-compose-multiple-networks.yml up -d`
#
#SERVICE_NETWORK=webservices
# If you want to customize the created network, use the following variable
#SERVICE_NETWORK_OPTIONS="--opt encrypted=true"
#
## NGINX file path (mount into the host)
# Here you can configure the path where nginx stores all the configurations and certificates.
# With the value ./nginx-data it creates a new sub-folder into your current path.
NGINX_FILES_PATH=~/docker-nginx-reverse-proxy-data
#
# NGINX use special conf files
#
# In case you want to add some special configuration to your NGINX Web Proxy you could
# add your files to ./conf.d/ folder as of sample file 'uploadsize.conf'
#
# [WARNING] This setting was built to use our `start.sh`.
#
# [WARNING] Once you set this options to true all your files will be copied to data
# folder (./data/conf.d). If you decide to remove this special configuration
# you must delete your files from data folder ./data/conf.d.
#
USE_NGINX_CONF_FILES=true
#
# Docker Logging Config
#
# This section offers two options max-size and max-file, which follow the docker documentation
# as follow:
#
# logging:
# driver: "json-file"
# options:
# max-size: "200k"
# max-file: "10"
#
#NGINX_WEB_LOG_DRIVER=json-file
#NGINX_WEB_LOG_MAX_SIZE=4m
#NGINX_WEB_LOG_MAX_FILE=10
#NGINX_GEN_LOG_DRIVER=json-file
#NGINX_GEN_LOG_MAX_SIZE=2m
#NGINX_GEN_LOG_MAX_FILE=10
#NGINX_LETSENCRYPT_LOG_DRIVER=json-file
#NGINX_LETSENCRYPT_LOG_MAX_SIZE=2m
#NGINX_LETSENCRYPT_LOG_MAX_FILE=10
#
# Set the local exposed ports for http and https on the Host
#
# NOTE: The default values are 80 and 443, only change this options if you really know what you are doing
#
#DOCKER_HTTP=80
#DOCKER_HTTPS=443
Raw
web-proxy-docker-ps.txt
Name Command State Ports
---------------------------------------------------------------------------------------------------------------------
bnware-reverse-nginx-gen /usr/local/bin/docker-gen ... Exit 2
bnware-reverse-nginx-letsencrypt /bin/bash /app/entrypoint. ... Up
bnware-reverse-nginx-web nginx -g daemon off; Up 0.0.0.0:443->443/tcp, 0.0.0.0:80->80/tcp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment