initial commit MCDA

2025-03-10 09:52:14 +01:00
commit 8ab2598c1d
3 changed files with 79 additions and 0 deletions
@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name mcda-calculator.psi.ch;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name mcda-calculator.psi.ch;
+
+    ssl_certificate /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
+
+    location / {
+        proxy_pass http://mcda-calculator:8050;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
@@ -0,0 +1,29 @@
+services:
+# linux-eng@psi.ch
+  nginx:
+    image: gitea.psi.ch/images/nginx:1.27.4
+    container_name: nginx_proxy
+    restart: always
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - /etc/pki/tls/certs:/etc/nginx/certs:ro
+      - /etc/pki/tls/private:/etc/nginx/private:ro
+      - /etc/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - /etc/nginx/conf.d:/etc/nginx/conf.d:ro
+    networks:
+      - public
+      - backend
+ 
+# Huang He <river.huang@psi.ch>
+  mcda-calculator:
+    image: gitea.psi.ch/images/mcda-calculator:latest
+    container_name: mcda-calculator
+    restart: always
+    networks: 
+      - backend
+
+networks:
+  public:
+  backend:
@@ -0,0 +1,29 @@
+user  nginx;
+worker_processes  auto;
+pid /run/nginx.pid;
+include /etc/nginx/modules-enabled/*.conf;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    add_header X-Content-Type-Options nosniff;
+    add_header X-Frame-Options DENY;
+    add_header X-XSS-Protection "1; mode=block";
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    add_header Referrer-Policy no-referrer-when-downgrade;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+    keepalive_timeout  65;
+    include /etc/nginx/conf.d/*.conf;
+}