Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
83 changes: 83 additions & 0 deletions .docker/nginx/nginx.conf
Original file line number Diff line number Diff line change
@@ -0,0 +1,83 @@
server {
listen 80;
server_name api.eventdev.org;

location /.well-known/acme-challenge/ {
root /var/www/certbot;
}

return 301 https://$server_name$request_uri;
}

server {
listen 443 ssl;
http2 on;
server_name api.eventdev.org;

# Altere o caminho dos certificados para o volume que o Certbot usa
ssl_certificate /etc/letsencrypt/live/api.eventdev.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/api.eventdev.org/privkey.pem;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;

add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";

gzip on;
gzip_vary on;
gzip_min_length 1024;
gzip_proxied any;
gzip_comp_level 6;
gzip_types
text/plain
text/css
text/xml
text/javascript
application/json
application/javascript
application/xml+rss
application/atom+xml
image/svg+xml;

location /auth/ {
proxy_pass http://supertokens-auth:3567/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_cache_bypass $http_upgrade;
}

location / {
proxy_pass http://api:5122/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_cache_bypass $http_upgrade;

proxy_connect_timeout 60s;
proxy_send_timeout 60s;
proxy_read_timeout 60s;
}

location ~ /\. {
deny all;
}

location ~ \.(env|log|sql)$ {
deny all;
}
}
12 changes: 12 additions & 0 deletions .env.dev.example
Original file line number Diff line number Diff line change
Expand Up @@ -27,3 +27,15 @@ SUPERTOKENS_CONNECTION_URI="http://supertokens-auth:3567"
# REDIS
REDIS_HOST=redis-cache
REDIS_PORT=6379


# ADMIN USER
ADMIN_EMAIL=example@gmail.com
ADMIN_PASSWORD=123456


# SMTP (envio de emails)
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=example@gmail.com
SMTP_PASSWORD=your_smtp_password
2 changes: 2 additions & 0 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,8 @@ health: ## Check API health
health-https: ## Check HTTPS API health
@echo " ✦ Checking HTTPS API health..."
@curl -k --fail https://api.eventdev.org/health && echo "✓ HTTPS API is healthy!" || echo "⚠ HTTPS API is not responding"
@echo "✦ Checking HTTPS API health..."
@curl -k --fail https://api.eventdev.org/health && echo "✓ HTTPS API is healthy!" || echo "⚠ HTTPS API is not responding"

clean: ## Clean all containers, images and volumes
@echo " ✦ Cleaning containers and volumes..."
Expand Down
Loading