keke125/vault-guard-web-react repository overview

networks:
  VGW:
    external: false

services:
  frontend:
    image: keke125/vault-guard-web-react:latest
    container_name: vgw-frontend
    restart: always
    networks:
      - VGW
    ports:
      - "3000:3000"

  backend:
    image: keke125/vault-guard-web-spring:latest
    container_name: vgw-backend
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - VGW_DB_URL=jdbc:mariadb://db:3306/VGW
      - VGW_DB_USER=VGW
      - VGW_DB_PASSWORD=changeme
      # JWT KEY (base64 string)
      # You can visit https://jwtsecret.com/generate to obtain a key
      # and then encode it as a Base64 string using https://www.base64encode.org.
      - VGW_JWT_KEY=changeme
      - VGW_JWT_ISSUER=com.keke125.vault
      - VGW_MAIL_PROVIDER=smtp.example.com
      - [email protected]
      - VGW_MAIL_PASSWORD=changeme
      - VGW_MAIL_SENDER_NAME=Vault Guard Web
      - [email protected]
      - VGW_WEB_URL=https://vault.keke125.com
      - spring_jpa_database_platform=org.hibernate.dialect.MariaDBDialect
      - spring_jpa_hibernate_ddl-auto=update
      - TZ=Asia/Taipei
    restart: always
    networks:
      - VGW
    ports:
      - "8080:8080"
    depends_on:
      - db

  db:
    image: mariadb:lts
    container_name: vgw-db
    restart: always
    environment:
      - MARIADB_ROOT_PASSWORD=changeme
      - MARIADB_USER=VGW
      - MARIADB_PASSWORD=changeme
      - MARIADB_DATABASE=VGW
    networks:
      - VGW
    volumes:
      - /path/to/vault-guard-web/mariadb:/var/lib/mysql

server
{
	listen 80;
	listen [::]:80;
	server_name example.com;

	if ($scheme = "http")
	{
		return 301 https://$host$request_uri;
	}
}

server
{
	listen 443 quic;
	listen 443 ssl;
	listen [::]:443 quic;
	listen [::]:443 ssl;
	http2 on;
	http3 on;
	quic_retry on;
	add_header Alt-Svc 'h3=":443"; ma=86400';
	server_name example.com;

	ssl_certificate /path/to/cert.pem;
	ssl_certificate_key /path/to/key.pem;

	location /
	{
		proxy_pass http://127.0.0.1:3000;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
	}

	location /api
	{
		proxy_pass http://127.0.0.1:8080;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
	}

        location /swagger-ui
        {
                proxy_pass http://127.0.0.1:8080;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
        }

        location /v3/api-docs
        {
                proxy_pass http://127.0.0.1:8080;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
        }
}