nginx

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 A5[server] <-- https --> B[nginx]
 subgraph gvp6nx1a
 A1[apps] <-- http --> B[nginx]
 A2[geoip] -- country-code --> B
 B -- log --> A3[promtail]
 A3 -- http --> A7[loki]
 A4[acme.sh] -- ssl-cert --> B
 end
 A7 <-- https --> E[server]
 A6[zerossl] -- dns-api --> A4
 B <-- https --> C1[client]

container 구성

Dockerfile

vi /opt/nginx/Dockerfile

FROM nginx:alpine-slim AS builder
RUN apk update && \
 apk add --no-cache --virtual .build-deps \
 gcc \
 geoip-dev \
 git \
 libc-dev \
 libmaxminddb \
 libmaxminddb-dev \
 make \
 openssl-dev \
 pcre-dev \
 python3-dev \
 py3-pip \
 zlib-dev && \
 rm -rf /var/cache/apk/*
WORKDIR /usr/local
RUN git clone https://github.com/leev/ngx_http_geoip2_module.git --depth=1
RUN wget http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz && \
 mkdir -p /usr/src && \
 tar -zxC /usr/src -f nginx-${NGINX_VERSION}.tar.gz
RUN CONFARGS=$(nginx -V 2>&1 | sed -n -e 's/^.*arguments: //p') \
 cd /usr/src/nginx-$NGINX_VERSION && \
 ./configure --with-compat $CONFARGS \
 --add-dynamic-module=/usr/local/ngx_http_geoip2_module/ && \
 make && \
 make modules && \
 make install && \
 mkdir -p /usr/local/nginx/modules/
FROM nginx:alpine-slim
COPY --from=builder /usr/local/nginx/modules/ngx_http_geoip2_module.so /usr/lib/nginx/modules/ngx_http_geoip2_module.so
RUN apk update && \
 apk add --no-cache \
 libmaxminddb \
 openssl && \
 rm -rf /var/cache/apk/*

docker build -t e7hnr8ov/nginx:alpine /opt/nginx

docker-compose.yml

network bridge 구성이어도 host를 허용하도록 구성

reverse-proxy on 대충어쩌고저쩌고샬라샬라

nginx

container 구성

Dockerfile

docker-compose.yml