From ebc1e2428225627c89b0f8b78b4c9ed44f20122b Mon Sep 17 00:00:00 2001
From: Terekhin Alexandr <alex@bearns.me>
Date: Sat, 14 Dec 2024 16:17:48 +0300
Subject: [PATCH] Nginx frontend in proxy mode (ssl connection failed)

---
 compose.yaml | 39 +++++++++++++++++++++++++++++++++++----
 1 file changed, 35 insertions(+), 4 deletions(-)

diff --git a/compose.yaml b/compose.yaml
index e36f4dc..5500d3b 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -11,10 +11,41 @@ services:
       - ./ca.pem:/etc/ca.pem:ro
     expose:
       - "443/tcp"
-    ports:
-      - "443:443/tcp"
     devices:
       - "/dev/ppp:/dev/ppp:rwm"
-
+    environment:
+      VIRTUAL_HOST: "api.bearns.me"
+      VIRTUAL_PROTO: "https"
+      VIRTUAL_PORT: 443
     cap_add:
-      - NET_ADMIN
\ No newline at end of file
+      - NET_ADMIN
+    networks:
+      - proxy-tier
+
+  proxy:
+    image: nginxproxy/nginx-proxy:alpine
+    expose:
+      - "443/tcp"
+      - "80/tcp"
+    ports:
+      - "443:443/tcp"
+    labels:
+      - 'com.github.nginx-proxy.nginx'
+    volumes:
+      - certs:/etc/nginx/certs:rw
+      - vhost.d:/etc/nginx/vhost.d
+      - html:/usr/share/nginx/html
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+    environment:
+      - ENABLE_IPV6=true
+      - TRUST_DOWNSTREAM_PROXY=true
+    networks:
+      - proxy-tier
+
+networks:
+  proxy-tier:
+
+volumes:
+  certs:
+  vhost.d:
+  html: