example tutorial

Author: twtrubiks

README.md

@@ -232,6 +232,10 @@ networks:
 
 一樣注意 networks 的部分，這邊多了 `external`，代表說我要用外部的 networks，如果找不到會報錯。
 
+### 範例
+
+[example](example)
+
 #### 執行方法
 
 先執行

example/README.md

@@ -0,0 +1,46 @@
+# 說明
+
+測試 domain
+
+```cmd
+❯ curl -H "Host: whoami.A.local" localhost
+I'm b5ffefea7f65
+❯ curl -H "Host: whoami.B.local" localhost
+I'm b5ffefea7f65
+❯ curl -H "Host: whoami.C.local" localhost
+I'm b5ffefea7f65
+```
+
+測試 `foo.com` 中的 `/nginx_status`
+
+```cmd
+❯ curl -H "Host: foo.com" localhost/nginx_status
+Active connections: 1
+server accepts handled requests
+ 10 10 10
+Reading: 0 Writing: 1 Waiting: 0
+```
+
+測試 domain 中 block http_user_agent,
+
+```cmd
+❯ curl -H "Host: whoami.A.local" -I -A 'mj12bot' localhost
+curl: (52) Empty reply from server
+
+❯ curl -H "Host: whoami.B.local" -I -A 'mj12bot' localhost
+HTTP/1.1 410 Gone
+Server: nginx/1.21.6
+Date: Sun, 15 May 2022 03:22:28 GMT
+Content-Type: text/html
+Content-Length: 143
+Connection: keep-alive
+
+❯ curl -H "Host: whoami.C.local" -I -A 'mj12bot' localhost
+HTTP/1.1 200 OK
+Server: nginx/1.21.6
+Date: Sun, 15 May 2022 03:25:04 GMT
+Content-Type: text/plain; charset=utf-8
+Content-Length: 17
+Connection: keep-alive
+```
+W

example/custom_nginx.tmpl

@@ -0,0 +1,51 @@
+version: '3.5'
+services:
+
+  nginx-proxy:
+    image: jwilder/nginx-proxy:alpine
+    restart: always
+    container_name: nginx-proxy
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - /var/run/docker.sock:/tmp/docker.sock:ro
+      - html:/usr/share/nginx/html
+      - dhparam:/etc/nginx/dhparam
+      # - vhost:/etc/nginx/vhost.d
+      - ./vhost.d:/etc/nginx/vhost.d
+      - certs:/etc/nginx/certs:ro
+      - ./nginx.conf:/etc/nginx/nginx.conf
+      - ./my_proxy.conf:/etc/nginx/conf.d/my_proxy.conf:ro
+      - ./custom_nginx.tmpl:/app/nginx.tmpl
+      - ./nginx_log:/var/log/nginx
+
+  nginx-proxy-letsencrypt:
+    image: jrcs/letsencrypt-nginx-proxy-companion
+    restart: always
+    depends_on:
+      - "nginx-proxy"
+    volumes:
+      - certs:/etc/nginx/certs
+      # - vhost:/etc/nginx/vhost.d
+      - ./vhost.d:/etc/nginx/vhost.d
+      - html:/usr/share/nginx/html
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    environment:
+      - ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory
+      - NGINX_PROXY_CONTAINER=nginx-proxy
+      # - DEFAULT_EMAIL=xxx@xxx.xxx
+
+  whoami:
+    image: jwilder/whoami
+    environment:
+      - VIRTUAL_HOST=foo.com,whoami.A.local,whoami.B.local,whoami.C.local
+
+
+volumes:
+  certs:
+  html:
+  # vhost:
+  dhparam:
+
+

example/docker-compose.yml

@@ -0,0 +1,22 @@
+client_max_body_size 6000m;
+proxy_read_timeout 720s;
+proxy_connect_timeout 720s;
+proxy_send_timeout 720s;
+
+
+# Add Headers for odoo proxy mode
+proxy_set_header X-Forwarded-Host $host;
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+proxy_set_header X-Forwarded-Proto $scheme;
+proxy_set_header X-Real-IP $remote_addr;
+
+# Gzip Compression
+gzip on;
+gzip_min_length 1024;
+gzip_types text/less  image/x-icon image/bmp image/svg+xml;
+gzip_proxied expired no-cache no-store private auth;
+gzip_vary on;
+
+
+proxy_headers_hash_max_size 51200;
+proxy_headers_hash_bucket_size 6400;

example/my_proxy.conf

@@ -0,0 +1,32 @@
+user  nginx;
+worker_processes  auto;
+
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+
+events {
+    worker_connections  2048;
+}
+
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    #gzip  on;
+
+    include /etc/nginx/conf.d/*.conf;
+}
+daemon off;

example/nginx.conf

@@ -0,0 +1,17 @@
+
+#location / {
+#        root /usr/share/nginx/html;
+#        index index.html index.htm index.php;
+#}
+
+
+location /nginx_status {
+
+    stub_status on;
+    access_log off;
+    # access_log /usr/local/nginx/logs/status.log;
+    # auth_basic "NginxStatus";
+
+    #allow xx.xxx.xx.xx;
+    #deny all;
+}

example/vhost.d/default

@@ -0,0 +1,6 @@
+if ($http_user_agent ~* (MJ12bot) ) {
+    return 444;
+}
+
+
+

example/vhost.d/whoami.A.local

@@ -0,0 +1,5 @@
+if ($http_user_agent ~* (MJ12bot) ) {
+    return 410;
+}
+
+