Chore/improve deployment flow (#4299)

Co-authored-by: 天魂 <365125264@qq.com>

docker/nginx/conf.d/default.conf.template

@@ -1,6 +1,8 @@
+# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration.
+
 server {
     listen 80;
-    server_name _;
+    server_name ${NGINX_SERVER_NAME};
 
     location /console/api {
       proxy_pass http://api:5001;
@@ -27,12 +29,6 @@ server {
       include proxy.conf;
     }
 
-    # If you want to support HTTPS, please uncomment the code snippet below
-    #listen 443 ssl;
-    #ssl_certificate ./../ssl/your_cert_file.cer;
-    #ssl_certificate_key ./../ssl/your_cert_key.key;
-    #ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
-    #ssl_prefer_server_ciphers on;
-    #ssl_session_cache shared:SSL:10m;
-    #ssl_session_timeout 10m;
+    # placeholder for https config defined in https.conf.template
+    ${HTTPS_CONFIG}
 }

docker/nginx/docker-entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+if [ "${HTTPS_ENABLED}" = "true" ]; then
+    # set the HTTPS_CONFIG environment variable to the content of the https.conf.template
+    HTTPS_CONFIG=$(envsubst < /etc/nginx/https.conf.template)
+    export HTTPS_CONFIG
+    # Substitute the HTTPS_CONFIG in the default.conf.template with content from https.conf.template
+    envsubst '${HTTPS_CONFIG}' < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf
+fi
+
+env_vars=$(printenv | cut -d= -f1 | sed 's/^/$/g' | paste -sd, -)
+
+envsubst "$env_vars" < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf
+envsubst "$env_vars" < /etc/nginx/proxy.conf.template > /etc/nginx/proxy.conf
+
+envsubst < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf
+
+# Start Nginx using the default entrypoint
+exec nginx -g 'daemon off;'

docker/nginx/https.conf.template

@@ -0,0 +1,9 @@
+# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration.
+
+listen ${NGINX_SSL_PORT} ssl;
+ssl_certificate ./../ssl/${NGINX_SSL_CERT_FILENAME};
+ssl_certificate_key ./../ssl/${NGINX_SSL_CERT_KEY_FILENAME};
+ssl_protocols ${NGINX_SSL_PROTOCOLS};
+ssl_prefer_server_ciphers on;
+ssl_session_cache shared:SSL:10m;
+ssl_session_timeout 10m;

docker/nginx/nginx.conf.template

@@ -1,5 +1,7 @@
+# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration.
+
 user  nginx;
-worker_processes  auto;
+worker_processes  ${NGINX_WORKER_PROCESSES};
 
 error_log  /var/log/nginx/error.log notice;
 pid        /var/run/nginx.pid;
@@ -23,10 +25,10 @@ http {
     sendfile        on;
     #tcp_nopush     on;
 
-    keepalive_timeout  65;
+    keepalive_timeout  ${NGINX_KEEPALIVE_TIMEOUT};
 
     #gzip  on;
-    client_max_body_size 15M;
+    client_max_body_size ${NGINX_CLIENT_MAX_BODY_SIZE};
 
     include /etc/nginx/conf.d/*.conf;
 }

docker/nginx/proxy.conf.template

@@ -1,8 +1,10 @@
+# Please do not directly edit this file. Instead, modify the .env variables related to NGINX configuration.
+
 proxy_set_header Host $host;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_http_version 1.1;
 proxy_set_header Connection "";
 proxy_buffering off;
-proxy_read_timeout 3600s;
-proxy_send_timeout 3600s;
+proxy_read_timeout ${NGINX_PROXY_READ_TIMEOUT};
+proxy_send_timeout ${NGINX_PROXY_SEND_TIMEOUT};

docker/nginx/ssl/.gitkeep

@@ -1 +0,0 @@
-