Give up on nnginx proxy letsencrypt, resort to manual approach!

build.sh

@@ -1,3 +1,3 @@
 #!/usr/bin/env bash
 
-sudo docker-compose build --build-arg UID=1000 --build-arg GID=1000
+docker-compose build --build-arg UID=1000 --build-arg GID=1000

docker-compose.yml

@@ -4,55 +4,34 @@ networks:
   naturalremedy:
 
 services:
-  nginx-proxy:
-    container_name: nginx-proxy
-    build: ./env/nginx-proxy
+  nr_nginx:
+    container_name: nr_nginx
+    build: ./env/nginx
     networks:
       - naturalremedy
     ports:
       - 80:80
       - 443:443
     env_file:
-      - ./env/nginx-proxy/.env
+      - ./env/nginx/.env
     depends_on:
-      - webapp
+      - nr_php72
     tty: true
     volumes:
       - ./src:/home/www/naturalremedy/src
       - ./storage:/home/www/storage/naturalremedy
-      - ./data/nginx-proxy/logs:/var/log/nginx
-      - ./env/nginx-proxy/webserver/nginx.conf:/etc/nginx/nginx.conf
-      - ./env/nginx-proxy/webserver/conf.d:/etc/nginx/conf.d
-      - ./env/nginx-proxy/webserver/vhost.d:/etc/nginx/vhost.d
-      - ./env/nginx-proxy/webserver/defaults:/etc/nginx/defaults
-      - ./env/nginx-proxy/webserver/global:/etc/nginx/global
-      - ./env/nginx-proxy/ssl/certs:/etc/nginx/certs
-      - ./env/nginx-proxy/share:/usr/share/nginx/html
+      - ./data/nginx/logs:/var/log/nginx
+      - ./env/nginx/webserver/nginx.conf:/etc/nginx/nginx.conf
+      - ./env/nginx/webserver/conf.d:/etc/nginx/conf.d
+      - ./env/nginx/webserver/vhost.d:/etc/nginx/vhost.d
+      - ./env/nginx/webserver/defaults:/etc/nginx/defaults
+      - ./env/nginx/webserver/global:/etc/nginx/global
+      - ./env/nginx/ssl/certs:/etc/nginx/certs
+      - ./env/nginx/share:/usr/share/nginx/html
       - /var/run/docker.sock:/tmp/docker.sock:ro
-    labels:
-      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
 
-  letsencrypt:
-    restart: always
-    container_name: letsencrypt
-    image: jrcs/letsencrypt-nginx-proxy-companion
-    env_file:
-      - ./env/letsencrypt/.env
-    volumes:
-      - ./data/letsencrypt/logs:/var/log
-      - ./env/nginx-proxy/webserver/nginx.conf:/etc/nginx/nginx.conf
-      - ./env/nginx-proxy/webserver/conf.d:/etc/nginx/conf.d
-      - ./env/nginx-proxy/webserver/vhost.d:/etc/nginx/vhost.d
-      - ./env/nginx-proxy/webserver/defaults:/etc/nginx/defaults
-      - ./env/nginx-proxy/webserver/global:/etc/nginx/global
-      - ./env/nginx-proxy/ssl/certs:/etc/nginx/certs
-      - ./env/nginx-proxy/share:/usr/share/nginx/html
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-    depends_on:
-      - nginx-proxy
-
-  mysql:
-    container_name: mysql
+  nr_mysql:
+    container_name: nr_mysql
     build: ./env/mysql
     networks:
       - naturalremedy
@@ -65,9 +44,9 @@ services:
       - ./env/mysql/conf.d:/etc/mysql/conf.d
       - ./data/dbimport/:/docker-entrypoint-initdb.d
 
-  elasticsearch:
+  nr_elasticsearch:
     build: ./env/elasticsearch
-    container_name: elasticsearch
+    container_name: nr_elasticsearch
     networks:
       - naturalremedy
     environment:
@@ -81,19 +60,19 @@ services:
     volumes:
       - ./data/elasticsearch:/usr/share/elasticsearch/data
 
-  mailhog:
+  nr_mailhog:
     image: mailhog/mailhog:latest
-    container_name: mailhog
+    container_name: nr_mailhog
     networks:
       - naturalremedy
     ports:
       - 8025:8025
     depends_on:
-      - nginx-proxy
+      - nr_php72
 
-  redis:
+  nr_redis:
     image: redis:4-alpine
-    container_name: redis
+    container_name: nr_redis
     command: /usr/local/etc/redis/redis.conf
     networks:
       - naturalremedy
@@ -102,14 +81,14 @@ services:
     volumes:
       - ./env/redis:/usr/local/etc/redis
 
-  webapp:
-    container_name: webapp
-    build: ./env/webapp
-    hostname: webapp
+  nr_php72:
+    container_name: nr_php72
+    build: ./env/php72
+    hostname: php72
     networks:
       - naturalremedy
     depends_on:
-      - mysql
+      - nr_mysql
     ports:
       - 9000:9000
       - 8080:8080

env/nginx-proxy/Dockerfile → env/nginx/Dockerfile

@@ -38,7 +38,7 @@ RUN rm /etc/localtime && \
 #   nginx
 
 # Default nginx homepage
-# ADD ./default /usr/share/nginx/html
+ADD ./default /usr/share/nginx/html
 
 # Add config and scripts
 ADD ./webserver/ /etc/nginx
@@ -49,14 +49,14 @@ RUN chmod +x -R /scripts
 ADD ./.env /etc/nginx
 
 # Copy localhost self-signed certificates
-# ADD ./ssl/certs /etc/nginx/ssl/certs
+ADD ./ssl/certs /etc/nginx/ssl/certs
 
 # Install Certbot (LetsEncrypt)
 # RUN echo "deb http://ftp.debian.org/debian stretch-backports main" >> /etc/apt/sources.list.d/stretch-backports.list && \
 #	apt-get update && \
 #	apt-get install -y python-certbot-nginx -t stretch-backports
 
-EXPOSE 80 443 8080
+EXPOSE 80 443
 
 # Execute Nginx config using environment variables to start all services
 CMD ["bash", "/scripts/start.sh"]

env/webapp/scripts/start-nginx.sh → env/nginx/scripts/start.sh

@@ -1,3 +1,4 @@
+# Any extra start up scripts here to run on container instantiation
 #!/bin/bash
 
 CONF="/etc/nginx/conf.d/naturalremedy.co.uk.template"
@@ -40,4 +41,4 @@ if [ -f $ENV ]; then
 else
 	echo "Error: no /etc/nginx/.env environment variables file found!"
 	exit 1
-fi
+fi

env/nginx/ssl/certs/_test_naturalremedy.portchris.co.uk/account_key.json

@@ -0,0 +1 @@
+../accounts/acme-staging.api.letsencrypt.org/directory/default.json

env/nginx/ssl/certs/_test_naturalremedy.portchris/account_key.json

@@ -0,0 +1 @@
+../accounts/acme-staging.api.letsencrypt.org/directory/default.json

env/nginx/ssl/certs/accounts/acme-staging.api.letsencrypt.org/directory/default.json

@@ -0,0 +1 @@
+{"e": "AQAB", "d": "qtAPYvGZUTbjH-EGhABvZNn54EePyAZ9OjypyTkI45RfWSGXbjiFBVk7JByCLbFaL0bjCRYo9_SeDlP6RFeM3q0uwrhn16viAGhEXP9XvliP4ZGdugFmQTlwKgzrp33xWNkBUfn2f0tjZ3XNwacb56E0z7OK3_dfq51fIm-QYBhWDM9q6kxu40TNFS763bc6zgQX_okQda4Qe14pIvX5Cn1FOvEvxbPfAjYsUAHaub_LcosIANx-XupRNmG2fGB4ck5Acy_QOJFWlzmpAoLVoYWkpIPxaODPFXLDILK-kKyL-OB-KRRpyRw3d8FWL4fx8Y18qJARVdjut3Tb3YbKqO54rDhbhQtaDEis5fasEOZtDkNFQZxYMcOO3Cdy_g_Gb_mJvXoX0dpbEnVytRSbO3WAZij1yy28raMufd-Za-BEbAkSW5T4roOgZiBwECOX9c_hCoTKRCh3TrD121VEwLABTbejPFKApoVWdgVAcJ0ddS4Jdxgf5656ophLZhi33ANRvIfepPpTbIjabD3Jf206Id8-WnVwwWlx7C1OcGP-OhrqGjGzA2n8l980YmFSayYGq7rvkbdWFQjAPLHazgFlrQSNAA5pDL6FXmen5XgWCj9NjTgCWmnmLNLTM3_yWXFJzGaeWoQNTVlx_v57P75HiLMTjugJtHXnQN69ig0", "n": "z1dTYnP9EtbNbPwb7EoKd0ZkN9yvdCK2xT9GnXXtWYfkVebrgs3rzOp7AtuD6kM5j3g2qQW0Tob7YalWTVfN_zQj05iqbhGPovaEDsEWkD-Q6BObjbmW6WLc3hk0X0Y_8ETu5HjV3jOqwsJmKJArPJ3DJshcYbSFyEEHZo7Rmj2aR9dV2BUr_FtmQERaqU-ggu_YfLA1oVeyBKF632Nlj6CPpoKkXVl9g3IRyoQtqyXlLvoDl_RGea4wsucAhGqhpuaEkg8y04bva-nn1Be6L_irnaAgOjLWqOlcptW8OMfF85Hlp25Q2a8G4TxryeF7I9HPGwaCd7JMaCjx1FL6Ssyil2YolJDwzjzKs_mIKotzj200uzOP0_U1F4vwnubTgEx76IHnXFote7D5NrpMq8ovVBxFfEdcmjZLbg82LKvdqHeAknYQJFHYAPkr0j3wG54XE23NcRTawBN_OMjCysV-jFhbatdhbDjQUHcULQs6p69UTfAJeYPVOtY_rjAuT-UNVLqkyemnOYrshPeho0Y5q0_HLkYP1izLYxixspD-pTzNctdhI2QT6XgEAnba_PD2B4SESAPZ0RagLHJy1s0UDoJgrE0md6j-cPeIIczSLD3mFl6iQ-e2FLdndjH34oeRoEbWTB7wtLhbhnBTBsN665dTuVyQffLaRYDr8GE", "q": "2ZR6Gqj5vrQtQ7NveQf_uoSA3xXraJyjzZtRy-fH7wCwh4-3_67EgWHOFcbIbCGtuzOPU-Jx2nw1k33AqkwOUguqtBSxL92mUEMiGt2GRSSDmuddN1uADmJh8AxR46u_-OiNlnLzBzEzW9V3iXM3tEilnTCXDFyUnL_zv9GJxRiNHQjrUQS_dWjgRvs23MKMIPNqcQ8Nlthz8wPD_R54YXDbM52klZ3-ke757n0DP_MGokTj5Ek-ZT6f2GaXzhcIoWNjOEE8BCo0eKqhh4sorjztuS2f-sn1B0UyPt65kKvT7yRuwJzevy5qxuDmJ8UoQ-ptLEMr9V0GpbzxQMwIuw", "p": "8_QCT4tRtlF5a6QDHRDcoXY5o9CtM1EUUrUs1ZRQbZ_cPB3XvQ_jKk2KQqmPMOzpRxTJXvCwRaVSQ1_wZq1OYRoTSGe_O7K_khNKWtw3sHBl4_bOiGTcIDlWeskFXjxYEXwyooO-bhrtg_2r7-0bpNHlpJ3XZjR5csH0VEsD4GoV5Q9vwP8b-Cy8DJSnttONog39a4DzrvzcE82itJh6Q_fMxWVmEUKa6deorQ3tu91Ei5fQ2GqVIoMHGxpl8TdqLig_oJRtoys3lCyLyQEWku2iXmQW1M8o4bMMnkk8mTpMUofN7S2oeuVFG61PnQ1F473_lr9F6r9G9VwTKdx3kw", "kty": "RSA", "qi": "QjGRbEYgFMCTuGOhwdNPB4rBSl094MUfW-9HnXO24JVkKEdkx8NKpdM7BLWnCGQUqOFSM8KQuZna7KLWPljZ7x9lppXqkqryHTDjTYcw0003ZxB-qhyq7oqf5Fh_HUwEecuo8qq3zoj0R-AjEOfE0ZDSCfK1iQ6wO6xfN4B0CyCkb_a79O-vNEMhKe5qtPHWygFNK8TPylY9P3wQLGnKs8N8pK6H4T2ZWTx_Y4JoTtRwdAmG6NSg-pom_uoBVudwrNg0eqgGNKy-jBXi-LqtkZqvzzHD6OG5uEKnVbsjllo-y3JD95iZ22LAMXpnS4ZAUdNKTIJNH1VE7GPvtNE6eg", "dp": "mCExk7M42K5EPtj_zA9o1xOn7D1E1TyZpN4wwFwGL-bB64dcsx0GN6o1L08X6ZXD_7y5uwfzlOr8uuFIRG-M8kbVgZCZE7xrdMes1a6A1_mvwJJ3x1zGXR4EjPtw6oxNC1JdLTVk-rq2JVp671r4ozb1s0tvOOA-YE8Nc8d3-mmNj9OpiDxOj9wtxNarI_sXVtjMkU7QJ-6tu3fAIEj57grI2sxZ8yeK_YqsOIb4GvBoP3kEFwGYUPZO5xr2OY-qGnClBRmqqVdZCIEjBs0z65pfZ-eYyUsKnn0OwGLBdHiDgfAIfgC8ES-KgjD49eKCE_y3N6W-Dx8LPBUYKkG_Gw", "dq": "pmchw4X8C1etTpvK41u0vydbkEIpWkaCGFtzgWjwxd9XIzZNWKSG8RSmEo2G9vwC7KsQMO18ecaJCxYf5Z5pTWJS2YsBwEPaUIQnbziA2hyE8lGEPzQhid7AXGBvuJnAJlNlBe0_5P5B8zgdRefycFUnJELnIrMjjYZYmxlcLnsKYWxS3BGvg9IDxQWX_dpkZUcE3xbOI9HDS9ZTbCCDnLI9Uwp7t1mwOlf0merOM3hgWHYrfIpvx-rPQSelbh67oQJr_bgWeHD21FpbU1igcjFy9i7orVsLpNXNCbw5W2WunrTUZ0cSLFEJpLSYEU597wM5H6L32Z2d2d_Y-t-QxQ"}

env/nginx/ssl/certs/default.crt

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

env/nginx/ssl/certs/default.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

env/nginx/ssl/certs/dhparam.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAsuN/H4saC/bhhgnixayOH3sijaMOIJWx7/kULiJTJsPIXjASFhYy
+wUkwPE/aps337/594keaTxMcbgicsuGjuay1N3zSh8LjSJXc5jgL86cEFHc2KaXC
+/5AZi02MeCvY6w/lxRkbzFhpst+cciR30Bug12wODlm+QB9sLhWmg/W44xUHzdgR
+BB9M7zIHqGmdf21LrhEVkxoN5pryxAG+PNYTqwbjaM0rWgYimKvaS8AzCr0uMuea
+1woGQ3wB7QIlilJaxAsCs6Al7cyBLxKk8nStwUdSXcXaSLKIKL/9YX4Ao3m/xSGB
+fsxuVxo3i4SL/DvZrTrOdpFg4G+Tpa0oGwIBAg==
+-----END DH PARAMETERS-----