chore: ssl 인증서를 발급하고 https를 적용한다.

chore: ssl 인증서를 발급하고 https를 적용한다.

.github/workflows/CD.yml

@@ -3,8 +3,6 @@ name: CD
 on:
   push:
     branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
 
 permissions:
   contents: read

scripts/data/nginx/backend.conf

@@ -1,12 +1,27 @@
 server {
   listen       80;
-  server_name  _;
-  access_log   logs/backend/access.log  main;
-  root         /usr/share/nginx/html;
+  server_name  shoutlink.me;
 
-  location /api {
-    proxy_pass http://backend;
+  location / {
+        return 301 https://$server_name$request_uri;
   }
+
+#  location /.well-known/acme-challenge/ {
+#    root /var/www/certbot;
+#  }
+}
+
+server {
+  listen 443 ssl;
+  server_name shoutlink.me;
+
+  location / {
+      proxy_pass http://backend;
+  }
+
+  ssl_certificate /etc/letsencrypt/live/shoutlink.me/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/shoutlink.me/privkey.pem;
+  ssl_prefer_server_ciphers on;
 }
 
 upstream backend {

scripts/docker-compose.yml

@@ -6,13 +6,15 @@ services:
     image: nginx
     ports:
       - "80:80"
+      - "443:443"
     networks:
       - shoutlink
     environment:
       TZ: "Asia/Seoul"
     volumes:
       - ./data/nginx:/etc/nginx/conf.d
       - ./data/nginx/logs:/etc/nginx/logs
+      - /home/ubuntu/data/ssl/etc/letsencrypt:/etc/letsencrypt
 
   shoutlink:
     image: hseong3243/shoutlink
@@ -26,4 +28,4 @@ services:
       - ./data/logs:/logs
 
 networks:
-  shoutlink:
+  shoutlink: