Docker Hub Image: https://hub.docker.com/repository/docker/huakunshen/nginx-certbot

Demo Video on YouTube

Web App Deployment with docker, Nginx and SSL

FROM ubuntu:18.04

RUN apt update -y \
    && apt install nginx -y \
    && apt-get install software-properties-common -y \
    && add-apt-repository ppa:certbot/certbot -y \
    && apt-get update -y \
    && apt-get install python-certbot-nginx -y \
    && apt-get clean

EXPOSE 80

STOPSIGNAL SIGTERM

CMD ["nginx", "-g", "daemon off;"]

docker buildx build --push \
    --platform linux/arm64,linux/amd64,linux/386,linux/arm/v7 \
    -t huakunshen/nginx-certbot .

server {
        listen 80 default_server;
        listen [::]:80 default_server;
        root /var/www/html;
        index index.html index.htm index.nginx-debian.html;
        server_name domain.com www.domain.com;
        location / {
            root /var/www/html;
            try_files $uri /index.html;
        }
        location /api/ {
            proxy_pass https://server/api/;
        }
}

version: '3.8'
services:
  server:
    image: node:12-alpine
    ports:
      - '8080:80'
    volumes:
      - ./server:/root/server
    env_file:
      - ./deploy/server.env
    entrypoint: sh /root/server/start_server.sh
  frontend:
    build:
      context: ./deploy
      dockerfile: Dockerfile
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - ./frontend/build:/var/www/html
      - ./deploy/default.conf:/etc/nginx/sites-available/default
    depends_on:
      - server

Add a volume to frontend if you want to keep let's encrypt configurations and certificates after update:

• ./letsencrypt:/etc/letsencrypt

./letsencrypt will contain the data, you won't need to setup SSL again after restarting/recreating the containers.

docker-compose up -d
docker exec -it <frontend_container> bash       # bash into the nginx container
certbot --nginx -d domain.com -d www.domain.com     # setup SSL certificate

If your server doesn't have port 80 open, the method above which uses http request for challenge won't work.

certbot certonly -a manual -d domain.com --preferred-challenges dns

After obtaining the certificate, add the path to your server configuration file.

ssl_certificate xxx.crt;
ssl_certificate_key xxx.key;