Use nginx for deployment

[TomasTomecek]

gunicorn works well but doesn't support 2 domains, which we have

Let's have an nginx in front of guni where we accept connections to both of the domains

Don't forget to create a route for logdetective.com too

[nikromen]

hmmm, not sure but I think this could be solved by adding cors to API

from fastapi import FastAPI
from fastapi.middleware.cors import CORSMiddleware

app = FastAPI()

app.add_middleware(
    CORSMiddleware,
    allow_origins=["https://www.logdetective.com", "https://www.log-detective.com"],
    allow_credentials=True,
    allow_methods=["*"],
    allow_headers=["*"],
)

nginx deployment sauce: https://www.uvicorn.org/deployment/#running-behind-nginx https://docs.gunicorn.org/en/latest/deploy.html

[FrostyX]

I know close to nothing about fastapi so you may be right. But CORS are usually related to what addresses can the JavaScript code communicate with.

[nikromen]

ah so cors won't help.

I also found a way how to "merge" two certificates into one - maybe https://community.letsencrypt.org/t/host-multiple-domains-with-a-single-certificate/20917/4 will help?

[TomasTomecek]

The wildcard certs work for subdomains of a single domain, basically *.example.com.

It would be amazing if we could merge the certificates for log-detective and logdetective into a single certificate file.

Also depends if gunicorn could work with such a certificate.

[nikromen]

• redirect to https

[nikromen]

tomas managed to merge those certificates \o/ #68

[TomasTomecek]

I think that longterm we'll need a proper web server between the openshift route and the application server (gunicorn) but for now, @nikromen is right that the problem is resolved

[praiskup]

The log-detective now redirects to https automatically, and logdetective redirects to log-detective.com. Only www.log-detective.com -> log-detective.com remains.

[nikromen]

I think that longterm we'll need a proper web server between the openshift route and the application server (gunicorn) but for now, @nikromen is right that the problem is resolved

I stored my WIP nginx configuration I had so once needed one can take a look and maybe copy something from nikromen@f75fd95