Lewati ke isi

Docker Nuxeo

Nuxeo container

docker container run -d \
  --name nuxeo \
  --expose 8080 \
  --env VIRTUAL_HOST=santiaji.proxsis.co.id \
  --env VIRTUAL_PORT=8080 \
  --env LETSENCRYPT_HOST=santiaji.proxsis.co.id \
  --env LETSENCRYPT_EMAIL=[email protected] \
  --env LETSENCRYPT_TEST=true \
  --env NUXEO_PACKAGES="nuxeo-web-ui nuxeo-dam nuxeo-drive nuxeo-showcase-content nuxeo-template-rendering nuxeo-template-rendering-samples nuxeo-spreadsheet" \
  nuxeo:LTS-2019

  --publish 8080:8080 \

nginx-proxy

{ echo 'server_tokens off;'; echo 'client_max_body_size 100m;'; } > ~/vols/nginx/vhost.d/santiaji.proxsis.co.id

my.nuxeo.tld

server {
  listen 443;
  server_name docker.loopingz.com;
  access_log /var/log/nginx/docker.loopingz.com_access_log main;
  error_log /var/log/nginx/docker.loopingz.com_error_log info;
  client_max_body_size 0;
  chunked_transfer_encoding on;
  location / {
    include /etc/nginx/conf.d/dev-auth;
    proxy_pass        http://10.0.0.204:5000;
    proxy_set_header  X-Real-IP  $remote_addr;
    proxy_set_header  X-Forwarded-Host $host;
    proxy_set_header  X-Forwarded-Server $host;
    proxy_set_header  X-Forwarded-Proto $scheme;
    proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    add_header 'Docker-Distribution-Api-Version' 'registry/2.0' always;
  }
  location /.well-known/acme-challenge {
    add_header    "Content-Type:" "application/jose+json" always;
    root /etc/nginx/conf.d;
  }
  ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!CAMELLIA;
  ssl_prefer_server_ciphers   on;
  ssl_certificate      /etc/letsencrypt/live/docker.loopingz.com/fullchain.pem;
  ssl_certificate_key  /etc/letsencrypt/live/docker.loopingz.com/privkey.pem;
}

Rujukan