Docker

TIL

Docker

• Dockerfile

FROM <base image> as builder

ENV <key> <value>

WORKDIR <container dir>

COPY <dir> <container dir>

RUN <commands in the base image>

CMD <default command>


FROM <other base image> as serve

COPY --from=builder <builder dir> <serve dir>

• Build

docker build .
docker build -f Dockerfile.dev .

• Tag

docker build -t <name> .

• Shell

docker run -it <id/tag> sh
docker exec -it <id/tag> sh

• Port Mapping

docker run -p 3000:3000 <id/tag>

• Reference Files
  • reference current working dir except node_modules

docker run -v /app/node_modules -v $(pwd):/app <image id>

Docker Compose

• docker-compose.yml

version: '3'
services:
    node-webapp:
        restart: always
        depends_on:
            - redis-server
        restart: always
        build: .
        ports:
            - '3000:3000'
    redis-server:
        image: redis

• Volumes

volumes:
    - /app/node_modules
    - .:/app

• Override docker file selection

build:
    context: .
    dockerfile: Dockerfile.dev

• Restart Policy

  • "no", always, on-failure, unless-stopped

• Commands

docker-compose up # run
docker-compose up --build # rebuild
docker-compose up -d # in background
docker-compose down # stop
docker-compose ps # status

Redis

• Pub & Sub

import redis from 'redis';

const subscriber = redis.createClient();
const publisher = redis.createClient();

subscriber.on('message', (channel, message) => {
    console.log(channel, message); // 'noti hello world'
});

subscriber.subscribe('noti');

publisher.publish('noti', 'hello world'); // trigger

NGINX

• Documentation

• /etc/nginx/conf.d/default.conf

server {
    listen 80 default_server;
    server_name www.example.com;
    root   /usr/share/nginx/html;

    location / {
        add_header X-Frame-Options SAMEORIGIN; # add headers
        add_header X-Content-Type-Options nosniff;
        add_header X-XSS-Protection "1; mode=block";
        index index.html index.htm; # serves static file
    }

    location /api {
        proxy_pass http://www.example.com:8080; # proxy
    }
}

• HTTPS setup

server {
    listen 80 default_server;
    server_name www.example.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name www.example.com;

    ssl_certificate /etc/nginx/ssl/example.crt;
    ssl_certificate_key /etc/nginx/ssl/example.key;

    location / {
        root  /usr/share/nginx/html;
        index index.html index.htm;
    }
}

Self-signed ssl certificate

• not recommended for production

openssl req -newkey rsa:4096 -x059 -sha256 -days 365 -nodes -out etc/nginx/ssl/example.crt -keyout /etc/nginx/ssl/example.key