ドメイン向けドッカーSSL

Question

ドメインを使用してDocker用にSSLを実行しようとしています。私は私のプロジェクトのために、次のdocker-compose.ymlを使用しています：

web: 
    build: /Users/marcin/docker/definitions/php-nginx/php-7.1-ubuntu 
    volumes: 
    - /c/Users/marcin/docker/projects/newdocker.app/html/:/usr/share/nginx/html/ 
    - /c/Users/marcin/docker/projects/newdocker.app/nginx/conf.d/:/etc/nginx/conf.d/ 
    - /c/Users/marcin/docker/projects/newdocker.app/nginx/log/:/var/log/nginx/  
    - /c/Users/marcin/docker/projects/newdocker.app/php/config/:/usr/local/etc/php/ 
    - /c/Users/marcin/docker/projects/newdocker.app/supervisor/conf.d/:/etc/supervisor/conf.d/ 
    - /c/Users/marcin/docker/projects/newdocker.app/supervisor/log/:/var/log/supervisor/ 
    - /c/Users/marcin/docker/local_share/:/root/.local_share/ 
    working_dir: /usr/share/nginx/html/ 
    links: 
    - db 
    container_name: newdocker.php 
    hostname: newdocker.app 
    ports: 
    - "280:22" 
    - "8300:80" 
    - "18300:443" 
    environment: 
    - VIRTUAL_HOST=newdocker.app 
    - VIRTUAL_PORT=443  
    - VIRTUAL_PROTO=https 
db: 
    build: /Users/marcin/docker/definitions/mysql/5.7 
    environment: 
    - MYSQL_ROOT_PASSWORD=pass 
    - MYSQL_DATABASE= 
    - MYSQL_USER= 
    - MYSQL_PASSWORD= 
    expose: 
    - 3306 
    volumes: 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/data/:/var/lib/mysql/ 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/conf.d/:/etc/mysql/conf.d/source 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/log/:/var/log/mysql/ 
    ports: 
    - "33200:3306" 
    container_name: newdocker.db 
    hostname: newdocker.app 

と私もjwilder/nginx-proxy以下docker-compose.ymlファイルで使用しています：

proxy: 
    image: jwilder/nginx-proxy 
    restart: always 
    volumes: 
    - /var/run/docker.sock:/tmp/docker.sock:ro 
    - ./nginx/conf.d/proxy.conf:/etc/nginx/conf.d/proxy.conf:ro  
    - ./certs/default.crt:/etc/nginx/certs/default.crt:ro 
    - ./certs/default.key:/etc/nginx/certs/default.key:ro  
    ports: 
    - "80:80"  
    - "443:443"  
    container_name: proxy 

をし、問題がこのようなものです：

http://192.168.99.100:8300/ - is working fine 
https://192.168.99.100:18300/ - is working fine 
https://192.168.99.100/ - I'm getting 503 (this is probably fine - this port is not used for this container) 
http://newdocker.app/ - is working fine 
https://newdocker.app:18300/ - is working fine 
https://newdocker.app/ - I'm getting 500 

私のnginx設定ファイルは次のようになります：

server { 
    listen  80; 
    listen  443 default ssl; 
    server_name localhost; 

    ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key; 
    ssl_certificate  /etc/ssl/certs/ssl-cert-snakeoil.pem; 
    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2; 
    ssl_ciphers   HIGH:!aNULL:!MD5; 

    # set maximum request size to 20M 
    client_max_body_size 20M; 

    root /usr/share/nginx/html/public/; 

    location/{ 
     root /usr/share/nginx/html/public/; 
     index index.php index.html index.htm; 
     try_files $uri $uri/ /index.php?$args; 
    } 

    sendfile off; 

    error_page 500 502 503 504 /50x.html; 
    location = /50x.html { 
     root /usr/share/nginx/html/public/; 
    } 


    location ~ \.php$ { 
     fastcgi_pass 127.0.0.1:9000; 
     fastcgi_index index.php; 
     fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 
     include  fastcgi_params; 
     fastcgi_param SERVER_NAME $host; 
    } 
} 

ポートを使用しないでhttps://newdocker.app/と動作するように設定するにはどうすればよいですか？

Answer 1

は、調査の後、私のnginxの設定ファイルは大丈夫だったが、私はこのように私のdocker-composer.yamlを更新する必要がありました：

web: 
    build: /Users/marcin/docker/definitions/php-nginx/php-7.1-ubuntu 
    volumes: 
    - /c/Users/marcin/docker/projects/newdocker.app/html/:/usr/share/nginx/html/ 
    - /c/Users/marcin/docker/projects/newdocker.app/nginx/conf.d/:/etc/nginx/conf.d/ 
    - /c/Users/marcin/docker/projects/newdocker.app/nginx/log/:/var/log/nginx/  
    - /c/Users/marcin/docker/projects/newdocker.app/php/config/:/usr/local/etc/php/ 
    - /c/Users/marcin/docker/projects/newdocker.app/supervisor/conf.d/:/etc/supervisor/conf.d/ 
    - /c/Users/marcin/docker/projects/newdocker.app/supervisor/log/:/var/log/supervisor/ 
    - /c/Users/marcin/docker/local_share/:/root/.local_share/ 
    working_dir: /usr/share/nginx/html/ 
    links: 
    - db 
    container_name: newdocker.php 
    hostname: newdocker.app 
    ports: 
    - "280:22" 
    - "8300:80" 
    - "18300:443" 
    environment: 
    - VIRTUAL_HOST=newdocker.app 
    - CERT_NAME=default 
    - HTTPS_METHOD=noredirect 

db: 
    build: /Users/marcin/docker/definitions/mysql/5.7 
    environment: 
    - MYSQL_ROOT_PASSWORD=pass 
    - MYSQL_DATABASE= 
    - MYSQL_USER= 
    - MYSQL_PASSWORD= 
    expose: 
    - 3306 
    volumes: 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/data/:/var/lib/mysql/ 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/conf.d/:/etc/mysql/conf.d/source 
    - /c/Users/marcin/docker/projects/newdocker.app/mysql/log/:/var/log/mysql/ 
    ports: 
    - "33200:3306" 
    container_name: newdocker.db 
    hostname: newdocker.app 

最も重要なことは、それがjwilder/nginx-で共有（私の証明書を動作させるためにここに- CERT_NAME=defaultを追加してプロキシには、2番目のdocker-compose.yamlに載っているようにdefault.crtとdefault.keyという名前が付いています。httpとhttpsの両方を動作させたいので、- HTTPS_METHOD=noredirectも追加しなければなりませんでした。

nginxを再起動すると、https://newdocker.appを使用してポートを追加せずにhttp://newdocker.appも動作します。