docker-compose
networks:
backend:
ipam:
driver: default
config:
- subnet: 169.254.6.0/28
services:
go-service:
..............
networks:
backend:
ipv4_address: 169.254.6.2
.................
nginx:
image: nginx:1.27-alpine
restart: unless-stopped
networks:
backend:
ipv4_address: 169.254.6.4
ports:
- "443:443"
- "9586:9586"
volumes:
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
- ./nginx/certs/myserver:/etc/nginx/certs:ro
- ./nginx/logs:/var/log/nginx
extra_hosts:
- test.com:169.254.6.2
!!!!!!!!!!!!!!! then whenever u use test.com in nginx container it will go to 169.254.6.2 the docker service
nginx.conf
# /etc/nginx/nginx.conf
worker_processes auto;
events { worker_connections 1024; }
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
server_tokens off;
sendfile on;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
server {
listen 443 ssl;
http2 on;
server_name site_a.com;
ssl_certificate /etc/nginx/certs/site_a.crt;
ssl_certificate_key /etc/nginx/certs/site_a.key;
root /usr/share/nginx/html;
location = /docs {
return 301 /docs/;
}
access_log /var/log/nginx/site_a-ssl.access.log;
error_log /var/log/nginx/site_a-ssl.error.log;
}
#teminates TLS at nginx, reverse proxy http to go service
server {
listen 443 ssl;
server_name siteb.com;
#charset koi8-r;
access_log /var/log/nginx/siteb-ssl.access.log;
error_log /var/log/nginx/siteb-ssl.error.log;
ssl_certificate /etc/nginx/certs/siteb.crt;
ssl_certificate_key /etc/nginx/certs/siteb.key;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#specified in docker
location / {
proxy_pass https:// test.com;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
}
// TCP reverse proxy
stream {
server {
listen 9888 reuseport;
proxy_connect_timeout 10s;
proxy_timeout 600s;
proxy_pass test.com:9888;
#log/inspect SNI if needed
ssl_preread on;
}
}
