added initial nginx config

compose/compose_core.yml

@@ -1,10 +1,19 @@
 version: '3.9'
 
-
 services:
+  nginx:
+    depends_on: ["datafed_web"]
+    image: nginx:latest
+    ports:
+      - 443:443
+    volumes:
+      - ./keys:/keys
+      - ./nginx.conf:/etc/nginx/conf.d/nginx.conf
+    networks:
+      - datafed-internal
 
-  datafed-web:
-    depends_on: ["datafed-core"]
+  datafed_web:
+    depends_on: ["datafed_core"]
     environment:
       DATAFED_GLOBUS_APP_SECRET: "${DATAFED_GLOBUS_APP_SECRET}"
       DATAFED_GLOBUS_APP_ID: "${DATAFED_GLOBUS_APP_ID}"
@@ -19,18 +28,20 @@ services:
       DATAFED_CORE_ADDRESS_PORT_INTERNAL: "datafed-core:7513"
       UID: "${DATAFED_UID}"
     image: datafed-web:latest
-    ports:
-      - 443:443 # This must be the same port that is mapped to the host for redirects to work
+    # ports:
+    #   - 8081:443
+    # ports:
+    #  - 443:443 # This must be the same port that is mapped to the host for redirects to work
     volumes:
       - ./keys:/opt/datafed/keys
       - ./logs:${DATAFED_CONTAINER_LOG_PATH}
     networks:
       - datafed-internal
 
-  datafed-core:
+  datafed_core:
     image: datafed-core:latest
     depends_on:
-      datafed-foxx:
+      datafed_foxx:
         condition: service_healthy
     environment:
       DATAFED_GLOBUS_APP_SECRET: "${DATAFED_GLOBUS_APP_SECRET}"
@@ -54,7 +65,7 @@ services:
     networks:
       - datafed-internal
 
-  datafed-foxx:
+  datafed_foxx:
     image: datafed-foxx:latest
     depends_on: ["arango"]
     environment:

compose/nginx.conf

@@ -0,0 +1,21 @@
+server {
+    listen 443 ssl;
+
+    ssl_certificate /keys/cert.crt;
+    ssl_certificate_key /keys/cert.key;
+
+    location / {
+        proxy_pass https://datafed_web;
+        #proxy_ssl_server_name on;
+        #proxy_ssl_protocols TLSv1.2 TLSv1.3;
+        #proxy_ssl_verify off;
+        #proxy_ssl_verify_depth 2;
+        #proxy_ssl_trusted_certificate /keys/cert.crt;
+
+        proxy_ssl_verify off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}