Deploy cms to staging docker in aws - add nginx reverse proxy

.editorconfig

@@ -15,3 +15,7 @@ indent_size = 2
 # for markdown files
 [*.md]
 trim_trailing_whitespace = false
+
+# for nginx.conf
+[nginx.conf]
+indent_size = 4

.github/workflows/cd-staging.yml

@@ -10,7 +10,7 @@ jobs:
     name: Build CMS Docker Image
     runs-on: ubuntu-22.04
     steps:
-      - name: checkout repo
+      - name: Checkout repo
         uses: actions/checkout@v3
 
       - name: Login to GitHub Container Registry
@@ -30,11 +30,36 @@ jobs:
             ghcr.io/${{ github.repository_owner }}/website/cms:${{ github.sha }}
             ghcr.io/${{ github.repository_owner }}/website/cms:latest
 
+  build-nginx-staging:
+    name: Build nginx Staging Image
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v2
+        with:
+          file: ./deployments/staging/nginx/Dockerfile
+          context: ./deployments/staging/nginx
+          push: true
+          tags: |
+            ghcr.io/${{ github.repository_owner }}/website/nginx-staging:${{ github.sha }}
+            ghcr.io/${{ github.repository_owner }}/website/nginx-staging:latest
 
   deploy-to-staging:
     name: Deploy To Staging
     runs-on: ubuntu-22.04
-    needs: build-cms
+    needs:
+      - build-cms
+      - build-nginx-staging
     steps:
       - name: Deploy and run docker images
         env:

.gitignore

@@ -1,5 +1,9 @@
 # See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
 
+# data
+
+**/data
+
 # dependencies
 node_modules
 .pnp
@@ -34,3 +38,6 @@ yarn-error.log*
 
 # jetbrains
 .idea
+
+# env vars
+**/.env

apps/cms/.env.example

@@ -1,2 +1,3 @@
-MONGODB_URI=
+MONGODB_URI=mongodb://localhost/cms
 PAYLOAD_SECRET=
+PAYLOAD_PUBLIC_SERVER_URL=http://localhost:3000

apps/cms/docker/staging/docker-compose.yml

@@ -7,5 +7,5 @@ services:
       context: ../../../../
       dockerfile: ./apps/cms/docker/staging/Dockerfile
     ports:
-      - "3000:3000"
+      - "80:80"
 

apps/cms/src/payload.config.ts

@@ -1,5 +1,6 @@
 import { buildConfig } from 'payload/config';
 import path from 'path';
+import dotenv from 'dotenv';
 
 import Categories from './collections/Categories';
 import Posts from './collections/Posts';
@@ -14,8 +15,12 @@ import MerchProducts from "./admin/views/MerchProducts";
 import { SCSEIcon, SCSELogo } from "./admin/graphics/Logos";
 import BeforeNavLinks from "./admin/components/BeforeNavLinks";
 
+dotenv.config({
+  path: path.resolve(__dirname, '../.env'),
+});
+
 export default buildConfig({
-  serverURL: 'http://localhost:3000',
+  serverURL: process.env.PAYLOAD_PUBLIC_SERVER_URL,
   admin: {
     components: {
       graphics: {

deployments/staging/.env

@@ -0,0 +1 @@
+COMPOSE_PROJECT_NAME=ntuscse-website-staging

deployments/staging/.env.example

@@ -0,0 +1 @@
+COMPOSE_PROJECT_NAME=ntuscse-website-staging

deployments/staging/cms.env

@@ -0,0 +1,5 @@
+MONGODB_URI=mongodb://ntuscse-website-staging-mongo-1/cms:27017
+PAYLOAD_SECRET=f5d5a7127f845b8f4d7c917
+PAYLOAD_CONFIG_PATH=src/payload.config.ts
+PAYLOAD_PUBLIC_SERVER_URL=http://localhost
+

deployments/staging/cms.env.example

@@ -1,2 +1,3 @@
 PAYLOAD_SECRET=
 MONGODB_URI=
+PAYLOAD_CONFIG_PATH=

deployments/staging/docker-compose.yml

@@ -1,22 +1,42 @@
-
 services:
   cms:
     image: ghcr.io/ntuscse/website/cms
+    networks:
+      - cms-network
     ports:
-      - 80:3000
+      - "7001:80"
     env_file:
       - cms.env
+    restart: always
+    depends_on:
+      - mongo
 
   mongo:
     image: mongo:latest
+    networks:
+      - cms-network
     ports:
       - "27017:27017"
     command:
       - --storageEngine=wiredTiger
     volumes:
       - ./data:/data/db
-    logging:
-      driver: none
+    restart: always
+
+  nginx:
+    # image: ghcr.io/ntuscse/website/nginx-staging
+    build: ./nginx
+    networks:
+      - cms-network
+    ports:
+      - "80:80"
+      - "443:443"
+    depends_on:
+      - cms
+
+networks:
+  cms-network:
+    driver: bridge
 
 volumes:
   data:

deployments/staging/nginx/Dockerfile

@@ -0,0 +1,3 @@
+FROM nginx
+RUN rm /etc/nginx/conf.d/default.conf
+COPY nginx.conf /etc/nginx/conf.d/default.conf

deployments/staging/nginx/nginx.conf

@@ -0,0 +1,51 @@
+server {
+    listen      80;
+    listen [::]:80;
+    server_name localhost;
+
+#     client_max_body_size 30M;
+
+    location /admin {
+        proxy_pass http://payload-cms:5000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_set_header X-Forwarded-For $remote_addr;
+    }
+
+    location /api {
+        proxy_pass http://payload-cms:5000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_set_header X-Forwarded-For $remote_addr;
+    }
+
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/share/nginx/html;
+    }
+
+#     location /admin {
+#         proxy_pass http://cms:3000/admin;
+#         proxy_set_header Host $host;
+#         proxy_set_header X-Real-IP $remote_addr;
+# #         proxy_redirect                  off;
+# #         proxy_buffering                 off;
+# #         proxy_request_buffering         off;
+# #         proxy_http_version 1.1;
+# #         proxy_set_header Upgrade $http_upgrade;
+# #         proxy_set_header Connection "upgrade";
+#     }
+#
+#     location /api {
+#         proxy_pass http://cms:3000/api;
+#         proxy_set_header Host $host;
+#         proxy_set_header X-Real-IP $remote_addr;
+#         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+#     }
+}

turbo.json

@@ -3,19 +3,20 @@
   "pipeline": {
     "dev": {
       "cache": false,
-      "env": ["PAYLOAD_SECRET", "MONGODB_URI", "WORDPRESS_API_URL"]
+      "env": ["PAYLOAD_SECRET", "MONGODB_URI", "WORDPRESS_API_URL", "PAYLOAD_PUBLIC_SERVER_URL"]
     },
     "build": {
       "dependsOn": ["^build"],
-      "env": ["PAYLOAD_SECRET", "MONGODB_URI", "WORDPRESS_API_URL"],
+      "env": ["PAYLOAD_SECRET", "MONGODB_URI", "WORDPRESS_API_URL", "PAYLOAD_PUBLIC_SERVER_URL"],
       "outputs": ["dist/**", ".next/**"]
     },
     "build-storybook": {
       "dependsOn": ["^build"],
       "outputs": ["storybook-static"]
     },
     "start": {
-      "dependsOn": ["build"]
+      "dependsOn": ["build"],
+      "env": ["PAYLOAD_SECRET", "MONGODB_URI", "WORDPRESS_API_URL", "PAYLOAD_PUBLIC_SERVER_URL"]
     },
     "lint": {
       "outputs": []