3
docker-compose is just a glorified wrapper around docker which gives you a nice textual representation of all the options you would regularly give to docker build or docker run. Plus, of course, it bundles several docker images/containers together. That said, it has no provisions to run anything else than you would get by calling docker.
I don't see how you ...
2
You will find people from both camps (terminating TLS as soon as possible vs terminating TLS in the application code) but it's not as serious as for example tabs vs spaces.
The benefit of terminating TLS by reverse proxy is that application developer does not have to implement TLS in the application itself - possibly introducing bugs. Another benefit ...
2
I have done this in the past using https://github.com/hashicorp/consul-template.
What consul-template does it generate a configuration file (for nginx) based on a certain template you provide. And the values that it fills into this template are coming from the configuration stored in consul.
Each time your micro-services register themselves in consul and ...
2
I would suggest at least one for production and one for npe. The nginx-ingress helm chart appears to only support setting a scope to all namespaces or just one namespace (a frustrating limitation not in other ingress controller options):
https://github.com/helm/charts/tree/master/stable/nginx-ingress
controller.scope.namespace
2
Unless you are using the AWS API Gateway, you'll still need some way of "serving" your Flask API. You will also need to provision an EC2 instance and run something to serve your API. Instead of running a windows EC2 instance with IIS you can save about 50% operating cost and use Nginx on a linux EC2 instance. Additionally, Nginx can be used as a reverse ...
1
This question doesn't really make sense - WSGI is the mechanism that a web server such as Apache would use to invoke an application or script, such as something written in Python. If you have no web server, then what would be using WSGI in the first place?
Is the question really, how do I take a pre-existing WSGI application and turn it into a standalone? ...
1
I suggest you mount your conf file as a volume:
docker run -v nginx.conf:/etc/nginx/nginx.conf ....
This way you can easily change the file outside the container and then just restart the container. If you change your config file inside the container and then you should have to restart nginx to pick-up the changes. At that point your container will stop ...
1
If the system recently rebooted and your proxy server is giving 502/503s, it's most likely that the backend service failed to start.
Using whatever tools are most appropriate for your OS/distro (e.g. systemctl, service/chkconfig, stop/start/restart/etc.), do the following things:
Verify that the backend (in this case Jenkins) is configured to start on boot....
1
Thanks to this question and answer here, I was able realize that I had two issues going on:
the containers have different default Docker networks because I am using two different docker-compose.yml files, I had envisioned my Ngnix proxy working independently from any of my API containers entirely, including the docker-compose, more on that issue below
the ...
1
Oops, turns out I just have to remove the line
listen [::]:443 ssl ipv6only=on;
and it works.
it's leftover from running NGINX certbot, I thought that was important
1
Production configurations often involve multiple levels of proxies. Each should provide a place for gathering stats. Proxies can also hide backend failures if you have a pool of nodes behind the proxy, which doesn't seem to be what you're going for here.
Your comment that you wouldn't be able to renew certificates with extra proxies is not correct. You ...
1
Sure, you put in as many proxies as you need. You don't want to over-complicate things, but it seems you have a good reason for your architecture.
1
All my searches for a term brought me to conclude that the general term either for one Apache virtual host file or a constellation of Nginx block files (each containing at least one block) is just that --- a virtual host.
Per project; either the virtual host (entity) is a single file or a combination of files, and that's true if the webserver software is ...
1
Problem is in resources - I see that each app container has own nginx instance, and server (VPS) must have global nginx, working as reverse proxy for containers.
Generally speaking yes, this is how this sort of thing goes. It's more of an issue for PHP than other languages because PHP doesn't really have a standalone application server, but instead is ...
1
I found the problem it is unrelated. The index.html file itself was the 'directory access is forbidden
1
As per this docker documentation the copy instruction may have multiple sources but only one destination.
Your first copy is coping two file /etc/passwd and /etc/group to /etc.
1
Changed the challenge from tls-sni to:
--preferred-challenges http
and the certificates are renewed.
1
I was able to combine your two example files by first converting them to JSON.
foo.json
{
"apiVersion": "extensions/v1beta1",
"kind": "Ingress",
"metadata": {
"name": "nginx-ingress"
},
"spec": {
"tls": [
{
"hosts": [
"foo.bar.com"
],
"secretName": "tls-secret"
}
],
"rules": [
{
...
1
Could I have these two different definitions which creates a single
Ingress with two rules (based on having the same name)?
Lets investigate whether that would be possible.
According to
https://kubernetes.io/docs/concepts/services-networking/ingress/
one could update an existing ingress yaml and subsequently run kubectl replace -f. From a microservice ...
1
You need to add a host entry of mylocalserver in the host file against 127.0.0.1, like 127.0.0.1 mylocalserver.
For /consul, there should be a /consul endpoint in your code to serve your request.
As per your configuration, your http://localhost will be served because you have set proxypass for "/"(all). It will send all requests to the application/server ...
Only top voted, non community-wiki answers of a minimum length are eligible
