feat: SSL 인증 적용

Team-MailedIt · Nov 25, 2021 · 4433cfe · 4433cfe
1 parent d4f4cd3
commit 4433cfe
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 2 deletions.
diff --git a/config/nginx/nginx.conf b/config/nginx/nginx.conf
@@ -4,7 +4,12 @@ upstream vote_mailedit {
 
 server {
 
-  listen 80;
+  listen 443 ssl;
+
+  server_name vote-mailedit.kro.kr;
+
+  ssl_certificate /etc/nginx/ssl/vote-mailedit.kro.kr/fullchain1.pem;
+  ssl_certificate_key /etc/nginx/ssl/vote-mailedit.kro.kr/privkey1.pem;
 
   location / {
     proxy_pass http://vote_mailedit;
@@ -20,4 +25,9 @@ server {
   location /media/ {
     alias /home/app/web/media/;
   }
+
+  location ~/.well-known/acme-challenge {
+    allow all; 
+    root /var/www/certbot;
+  }
 }
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
@@ -1,4 +1,4 @@
-version: '3'
+version: '3.8'
 services:
 
   web:
@@ -24,10 +24,15 @@ services:
     container_name: nginx
     build: ./config/nginx
     volumes:
+      - type: bind
+        source: /home/app/web/certbot/conf/archive
+        target: /etc/nginx/ssl
+      - /home/app/web/certbot/data:/var/www/certbot
       - static:/home/app/web/static
       - media:/home/app/web/media
     ports:
       - "80:80"
+      - "443:443"
     depends_on:
       - web