I try to edit ngix file and then i m using docker-compose-prod.yml but not working

[sunilit42]

Hello,

I try to set custom domain into ngix file so i need to use docker-compose-prod.yml but when i use docker-compose-prod.yml, it is not working

Version in "./docker-compose-prod.yml" is unsupported. You might be seeing this error because you're using the wrong Compose file version. Either specify a supported version (e.g "2.2" or "3.3") and place your service definitions under the services key, or omit the version key and place your service definitions at the root of the file to use version 1. For more on the Compose file format versions, see https://docs.docker.com/compose/compose-file/

My docker version : Docker version 20.10.18, build b40c2f6

[vtsykun]

Hi More simple way to setup domain is use nginx proxy in the root host

you can use simple docker-compose.yml

version: '3.6'

services:
    packeton:
        image: packeton/packeton:latest
        container_name: packeton
        hostname: packeton
        ports:
            - '127.0.0.1:8089:80'
        environment:
            TRUSTED_PROXIES: 172.16.0.0/12
            DATABASE_URL: "mysql://app:!ChangeMe!@ec2-host.example.com:3306/app?serverVersion=8&charset=utf8mb4"
        volumes:
            - .docker:/data

Then you need to nginx / apache to the root host and proxy request to local 8089 port - where 8089

        ports:
            - '127.0.0.1:8089:80'

Example nginx proxy config is

server {
    listen 443 ssl http2;
    server_name satis.example.org;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/satis.example.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/satis.example.org/privkey.pem; # managed by Certbot
    ssl_session_cache    shared:SSL:10m;
    ssl_session_timeout  10m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256!RC4:!aNULL:!eNULL:!MD5:!EXPORT:!LOW:!SEED:!CAMELLIA:!IDEA:!PSK:!SRP:!SSLv2';

    add_header Strict-Transport-Security max-age=15768000;

    location / {
        proxy_set_header        Host $host;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        proxy_pass          http://localhost:8089;
        proxy_read_timeout  90;
    }

}

server {
    if ($host = satis.example.org) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen 80;
    return 301 https://$host$request_uri;
    server_name satis.example.org;
}

The second why is use jwilder/nginx-proxy docker image to step up nginx proxy via docker. Also you may to use jrcs/letsencrypt-nginx-proxy-companion docker to get letsencrypt

version: '3.6'

services:
    packeton:
        image: packeton/packeton:latest
        container_name: packeton
        hostname: packeton
        ports:
            - '127.0.0.1:8089:80'
        environment:
            VIRTUAL_HOST: satis.example.com
            LETSENCRYPT_HOST: satis.example.com
            LETSENCRYPT_EMAIL: sysadmin@example.com

            TRUSTED_PROXIES: 172.16.0.0/12
            DATABASE_URL: "mysql://app:!ChangeMe!@ec2-host.example.com:3306/app?serverVersion=8&charset=utf8mb4"
        volumes:
            - .docker:/data

networks:
  default:
    external:
      name: webproxy

Where VIRTUAL_HOST, LETSENCRYPT_HOST, LETSENCRYPT_EMAIL used for jrcs/letsencrypt-nginx-proxy-companion jwilder/nginx-proxy See docs https://hub.docker.com/r/jwilder/nginx-proxy https://github.com/jwilder/docker-letsencrypt-nginx-proxy-companion

[sunilit42]

I think we need to map - ./src/nginx.conf.sample:/var/www/html/nginx.conf:cached something right?

[sunilit42]

Hello,

I try to below way but not working `version: '2.2'

x-volumes: &default-volume volumes:

• app-data:/data
• app-var:/var/www/packagist/var

x-restart-policy: &restart_policy restart: unless-stopped

x-environment: &default-environment REDIS_URL: redis://redis DATABASE_URL: "postgresql://packeton:pack123@postgres:5432/packeton?serverVersion=14&charset=utf8" SKIP_INIT: 1

services: redis: image: redis:7-alpine hostname: redis <<: *restart_policy volumes:

• redis-data:/data

  postgres: image: postgres:14-alpine hostname: postgres <<: *restart_policy volumes:

• postgres-data:/var/lib/postgresql/data environment: POSTGRES_USER: packeton POSTGRES_PASSWORD: pack123 POSTGRES_DB: packeton

  php-fpm: image: packeton/packeton:latest hostname: php-fpm command: ['php-fpm', '-F'] <<: restart_policy <<: default-volume environment: <<: *default-environment SKIP_INIT: 0 WAIT_FOR_HOST: 'postgres:5432' depends_on:

• "postgres"

• "redis"

  nginx: image: packeton/packeton:latest hostname: nginx volumes:

• ./docker/nginx:/var/www/packagist/docker/nginx ports:
• '127.0.0.1:8088:80' <<: restart_policy <<: default-volume command: > bash -c 'sed s/_PHP_FPMHOST/php-fpm:9000/g < docker/nginx/nginx-tpl.conf > /etc/nginx/nginx.conf && nginx' environment: <<: *default-environment WAIT_FOR_HOST: 'php-fpm:9000' depends_on:

• "php-fpm"

  worker: image: packeton/packeton:latest hostname: packeton-worker command: ['bin/console', 'packagist:run-workers', '-v'] user: www-data <<: restart_policy <<: default-volume environment: <<: *default-environment WAIT_FOR_HOST: 'php-fpm:9000' depends_on:

• "php-fpm"

  cron: image: packeton/packeton:latest hostname: packeton-cron command: ['bin/console', 'okvpn:cron', '--demand', '--time-limit=3600'] user: www-data <<: restart_policy <<: default-volume environment: <<: *default-environment WAIT_FOR_HOST: 'php-fpm:9000' depends_on:

• "php-fpm"

volumes: redis-data: postgres-data: app-data: app-var: `

And nginx-tpl.conf file

`daemon off; user www-data; worker_processes auto; pid /run/nginx.pid;

events { worker_connections 768; }

http { sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048;

server_tokens off;
default_type application/octet-stream;
include /etc/nginx/mime.types;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
access_log off;

gzip on;
gzip_disable "msie6";
client_max_body_size 10M;
server {
    server_name repo.custom.com;
    listen 80 default_server;
    root /var/www/packagist/public;

    location / {
        try_files $uri @rewriteapp;
    }

    location @rewriteapp {
        rewrite ^(.*)$ /index.php/$1 last;
    }

    fastcgi_buffers 128 128k;
    fastcgi_buffer_size 256k;
    location ~ ^/index\.php(/|$) {
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_index index.php;
        send_timeout 600;
        fastcgi_read_timeout 600;
        fastcgi_pass _PHP_FPM_HOST_;
    }

    location ~ \.php$ {
        return 404;
    }
    access_log off;
}

} `

[vtsykun]

Hi Must be version: '3.9'

[sunilit42]

ERROR: Version in "./docker-compose-prod.yml" is unsupported. You might be seeing this error because you're using the wrong Compose file version. Either specify a supported version (e.g "2.2" or "3.3") and place your service definitions under the services key, or omit the version key and place your service definitions at the root of the file to use version 1. For more on the Compose file format versions, see https://docs.docker.com/compose/compose-file/

In your composer file I added volumes:

• ./docker/nginx:/var/www/packagist/docker/nginx for copy nginx file

[vtsykun]

Hi, please use the simple single docker container or update docker-compose

https://github.com/vtsykun/packeton/blob/master/docker-compose.yml

[vtsykun]

Also nginx configuration was loaded from /etc/nginx The volumes will be ignore

• ./docker/nginx:/var/www/packagist/docker/nginx

[sunilit42]

@vtsykun how i can set the custom domain without modifying ngix file? that's why I m doing volume mapping using that I can setup domain name

[vtsykun]

Hi, can you install nginx/apache on the root host? more simple to reverse proxy on host machine to setup ssl and custom domain, no need to change docker nginx configuration to setup custom domain.