diff --git a/docker/README.md b/docker/README.md index 9e0fe68ef..5b3ebbadd 100644 --- a/docker/README.md +++ b/docker/README.md @@ -21,8 +21,6 @@ docker buildx build -t aries-engine:0.1-pre-release -f ./docker/aries-engine-doc ## Test Mono Engine -### Test Mono Engine with PostgreSQL - [1] Initiate volume for mono data and postgres data ```bash @@ -34,7 +32,6 @@ docker buildx build -t aries-engine:0.1-pre-release -f ./docker/aries-engine-doc # .\init-volume.ps1 -baseDir "D:\" -configFile ".\config.toml" ``` - [2] Start whole mono engine stack on local for testing ```bash # create network @@ -58,7 +55,54 @@ docker run --rm -it -d --name mono-engine --network mono-network -v /mnt/data/mo docker run --rm -it -d --name mono-ui --network mono-network -e MEGA_INTERNAL_HOST=http://mono-engine:8000 -e MEGA_HOST=https://git.gitmono.com -p 3000:3000 mono-ui:0.1-pre-release ``` -## Test aries engine +[4] Nginx configuration for Mono + +```Nginx +server { + listen 443; + listen [::]:443; + + server_name git.gitxxx.org; + + ssl_certificate /etc/letsencrypt/live/gitxxx.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/gitxxx.org/privkey.pem; + + access_log /var/log/nginx/git.gitxxx.access.log; + error_log /var/log/nginx/git.gitxxx.error.log; + + location / { + proxy_pass http://127.0.0.1:8000; + } +} + +server { + listen 443; + listen [::]:443; + + server_name console.gitxxx.org; + + ssl_certificate /etc/letsencrypt/live/gitxxx.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/gitxxx.org/privkey.pem; + + access_log /var/log/nginx/console.gitxxx.access.log; + error_log /var/log/nginx/console.gitxxx.error.log; + + location / { + proxy_pass http://127.0.0.1:3000; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Proto $scheme; + + proxy_set_header Origin $scheme://$host; + } +} + +``` + +## Test Aries engine [1] Initiate volume for aries and postgres data @@ -75,8 +119,49 @@ docker run --rm -it -d --name mono-ui --network mono-network -e MEGA_INTERNAL_HO ```bash # create network -docker network create mono-network +docker network create aries-network -# run postgres -docker run --rm -it -d --name mono-pg --network mono-network -v /tmp/data/mono/pg-data:/var/lib/postgresql/data -p 5432:5432 mono-pg:0.1-pre-release -docker run --rm -it -d --name aries-engine --network mono-network -v /tmp/data/mono/mono-data:/opt/mega -p 8001:8001 -p 8888:8888 aries-engine:0.1-pre-release \ No newline at end of file +# run postgres and aries engine +docker run --rm -it -d --name mono-pg --network aries-network -v /tmp/data/mono/pg-data:/var/lib/postgresql/data -p 5432:5432 mono-pg:0.1-pre-release +docker run --rm -it -d --name aries-engine --network aries-network -v /tmp/data/mono/mono-data:/opt/mega -p 8001:8001 -p 8888:8888 aries-engine:0.1-pre-release +``` + +[3] Nginx configuration for Aries + +```Nginx + server { + listen 443 ssl; + server_name gitxxx.org; + + ssl_certificate /home/ubuntu/ssl/gitxxx-org-fullchain.pem; + ssl_certificate_key /home/ubuntu/ssl/gitxxx-org-key.pem; + + location /relay/ { + proxy_pass http://127.0.0.1:8001/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } +``` + +## Certbot for SSL Certificate + +[1] Install certbot + +```bash +sudo apt install certbot +``` + +[2] Get SSL certificate + +```bash +certbot certonly -d "*.gitxxx.org" -d gitxxx.org --manual --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory +``` + +[3] List SSL certificate + +```bash +ls /etc/letsencrypt/live/gitxxx.org +```