refactor: rename nginx ssl directory to certs

README.md

@@ -64,7 +64,7 @@ docker compose down
 
 On first start, `nginx/whitelist.conf` is auto-created from `whitelist.conf.example`. Edit that file if you need to restrict allowed IP addresses.
 
-To enable SSL (HTTPS), configure SSL settings in `.env` and place certificates in `nginx/ssl`:
+To enable SSL (HTTPS), configure SSL settings in `.env` and place certificates in `nginx/certs`:
 
 ```bash
 SSL_ENABLE=true
@@ -73,7 +73,7 @@ SSL_KEY_FILE=privkey.pem
 ```
 
 ```bash
-nginx/ssl/
+nginx/certs/
 ├── cert.pem       # Your SSL certificate
 └── privkey.pem    # Your private key
 ```

docker-compose-prod.yaml

@@ -6,7 +6,7 @@ services:
       - ./nginx/nginx.conf:/etc/nginx/nginx.conf
       - ./nginx/templates:/etc/nginx/templates
       - ./nginx/custom.d:/etc/nginx/custom.d
-      - ./nginx/ssl:/etc/nginx/ssl
+      - ./nginx/certs:/etc/nginx/certs
       - ./nginx/logs:/var/log/nginx
       - ./nginx:/etc/nginx/host:rw
       - ./nginx/logrotate/nginx:/etc/logrotate.d/nginx
@@ -146,7 +146,7 @@ services:
         condition: service_started
     networks:
       - backend-network
-    restart: always    
+    restart: always
     healthcheck:
       test: ["CMD-SHELL", "curl --silent --fail localhost:5000/healthz || exit 1"]
       interval: 10s
@@ -180,7 +180,7 @@ services:
       interval: 30s
       timeout: 5s
       retries: 5
-      
+
   phpmyadmin:
     image: phpmyadmin/phpmyadmin:5.2.3
     environment:
@@ -383,4 +383,4 @@ networks:
   frontend-network:
     driver: bridge
   backend-network:
-    driver: bridge
+    driver: bridge

docker-compose.yaml

@@ -6,7 +6,7 @@ services:
       - ./nginx/nginx.conf:/etc/nginx/nginx.conf
       - ./nginx/templates:/etc/nginx/templates
       - ./nginx/custom.d:/etc/nginx/custom.d
-      - ./nginx/ssl:/etc/nginx/ssl
+      - ./nginx/certs:/etc/nginx/certs
       - ./nginx/logs:/var/log/nginx
       - ./nginx:/etc/nginx/host:rw
       - ./nginx/logrotate/nginx:/etc/logrotate.d/nginx

nginx/.gitignore

@@ -1,9 +1,9 @@
-# SSL
+# Certificates
 *.pem
 *.key
 *.crt
 *.csr
 
 # Custom Configurations
 custom.d/*.conf
-whitelist.conf
+whitelist.conf

nginx/README.md

@@ -48,9 +48,9 @@ SSL_CERT_FILE=cert.pem
 SSL_KEY_FILE=privkey.pem
 ```
 
-Place your certificates in the `nginx/ssl` directory:
+Place your certificates in the `nginx/certs` directory:
 ```bash
-nginx/ssl/
+nginx/certs/
 ├── cert.pem         # Your SSL certificate
 └── privkey.pem      # Your private key
-```
+```

nginx/templates/backend.conf

@@ -9,13 +9,13 @@ server {
     listen {{ .Env.BACKEND_PORT }};
     {{ end }}
     server_name {{ .Env.HOSTNAME }};
-    
+
     {{ if eq .Env.SSL_ENABLE "true" }}
     # Redirect HTTP to HTTPS when accessing HTTPS port
     error_page 497 =301 https://$host:$server_port$request_uri;
 
-    ssl_certificate /etc/nginx/ssl/{{ .Env.SSL_CERT_FILE }};
-    ssl_certificate_key /etc/nginx/ssl/{{ .Env.SSL_KEY_FILE }};
+    ssl_certificate /etc/nginx/certs/{{ .Env.SSL_CERT_FILE }};
+    ssl_certificate_key /etc/nginx/certs/{{ .Env.SSL_KEY_FILE }};
 
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
@@ -58,4 +58,4 @@ server {
         proxy_pass_request_headers on;
         proxy_pass_request_body on;
     }
-}
+}

nginx/templates/frontend.conf

@@ -9,23 +9,23 @@ server {
     listen {{ .Env.FRONTEND_PORT }};
     {{ end }}
     server_name {{ .Env.HOSTNAME }};
-    
+
     {{ if eq .Env.SSL_ENABLE "true" }}
     # Redirect HTTP to HTTPS when accessing HTTPS port
     error_page 497 =301 https://$host:$server_port$request_uri;
 
-    ssl_certificate /etc/nginx/ssl/{{ .Env.SSL_CERT_FILE }};
-    ssl_certificate_key /etc/nginx/ssl/{{ .Env.SSL_KEY_FILE }};
+    ssl_certificate /etc/nginx/certs/{{ .Env.SSL_CERT_FILE }};
+    ssl_certificate_key /etc/nginx/certs/{{ .Env.SSL_KEY_FILE }};
 
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
     ssl_session_tickets off;
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
-    ssl_prefer_server_ciphers off;   
+    ssl_prefer_server_ciphers off;
 
     # HSTS - Only enable when SSL is enabled
-    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; 
+    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
     {{ end }}
 
     # Increase WebSocket timeout settings
@@ -40,7 +40,7 @@ server {
     {{ if eq .Env.NODE_ENV "production" }}
     # Production configuration
     root /usr/share/nginx/html;
-    
+
     # Handle static assets
     location /assets/ {
         alias /usr/share/nginx/html/assets/;
@@ -78,4 +78,4 @@ server {
         proxy_pass_request_body on;
     }
     {{ end }}
-}
+}

nginx/templates/grafana.conf

@@ -9,13 +9,13 @@ server {
     listen {{ .Env.GRAFANA_PORT }};
     {{ end }}
     server_name {{ .Env.HOSTNAME }};
-    
+
     {{ if eq .Env.SSL_ENABLE "true" }}
     # Redirect HTTP to HTTPS when accessing HTTPS port
     error_page 497 =301 https://$host:$server_port$request_uri;
 
-    ssl_certificate /etc/nginx/ssl/{{ .Env.SSL_CERT_FILE }};
-    ssl_certificate_key /etc/nginx/ssl/{{ .Env.SSL_KEY_FILE }};
+    ssl_certificate /etc/nginx/certs/{{ .Env.SSL_CERT_FILE }};
+    ssl_certificate_key /etc/nginx/certs/{{ .Env.SSL_KEY_FILE }};
 
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
@@ -58,4 +58,4 @@ server {
         proxy_pass_request_headers on;
         proxy_pass_request_body on;
     }
-} 
+}

nginx/templates/phpmyadmin.conf

@@ -9,13 +9,13 @@ server {
     listen {{ .Env.PMA_PORT }};
     {{ end }}
     server_name {{ .Env.HOSTNAME }};
-    
+
     {{ if eq .Env.SSL_ENABLE "true" }}
     # Redirect HTTP to HTTPS when accessing HTTPS port
     error_page 497 =301 https://$host:$server_port$request_uri;
 
-    ssl_certificate /etc/nginx/ssl/{{ .Env.SSL_CERT_FILE }};
-    ssl_certificate_key /etc/nginx/ssl/{{ .Env.SSL_KEY_FILE }};
+    ssl_certificate /etc/nginx/certs/{{ .Env.SSL_CERT_FILE }};
+    ssl_certificate_key /etc/nginx/certs/{{ .Env.SSL_KEY_FILE }};
 
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
@@ -57,4 +57,4 @@ server {
         proxy_pass_request_headers on;
         proxy_pass_request_body on;
     }
-}
+}

nginx/templates/redis.conf

@@ -9,13 +9,13 @@ server {
     listen {{ .Env.REDIS_INSIGHT_PORT }};
     {{ end }}
     server_name {{ .Env.HOSTNAME }};
-    
+
     {{ if eq .Env.SSL_ENABLE "true" }}
     # Redirect HTTP to HTTPS when accessing HTTPS port
     error_page 497 =301 https://$host:$server_port$request_uri;
 
-    ssl_certificate /etc/nginx/ssl/{{ .Env.SSL_CERT_FILE }};
-    ssl_certificate_key /etc/nginx/ssl/{{ .Env.SSL_KEY_FILE }};
+    ssl_certificate /etc/nginx/certs/{{ .Env.SSL_CERT_FILE }};
+    ssl_certificate_key /etc/nginx/certs/{{ .Env.SSL_KEY_FILE }};
 
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
@@ -32,7 +32,7 @@ server {
     {{ if and .Env.REDIS_INSIGHT_USER .Env.REDIS_INSIGHT_PASSWORD }}
     auth_basic "Redis Insight Access";
     auth_basic_user_file /etc/nginx/.htpasswd;
-    
+
     # Additional security headers
     add_header X-Frame-Options "SAMEORIGIN" always;
     add_header X-Content-Type-Options "nosniff" always;
@@ -56,4 +56,4 @@ server {
         proxy_pass_request_headers on;
         proxy_pass_request_body on;
     }
-}
+}