@jkatzen hi. Where would I add the modification to client_max_body_size in the recipe. I have seen some examples, but not being a “chef” expert, I just thought I’d check what was best practices?
cheers
If you look under the “Custom Nginx Configuration” in the nginx-proxy repo, you can find that you are able to set Proxy-wide settings either by adding them to a derived image of nginx-proxy or mounting it during runtime similar to how my chef recipes mount the ssl certificates.
1 Like
@jkatzen thanks, will try speak tomorrow - booked via Sunsama.
I had added to my Dockerfile:
From jkatzen/meteordlinux
MAINTAINER Your Name
COPY ./dockerstuff /etc/nginx/certs
RUN { \
echo 'client_max_body_size 100m;'; \
} > /etc/nginx/conf.d/my_proxy.conf
ENV DEBIAN_FRONTEND noninteractive
RUN apt-get update && apt-get install -y graphicsmagick
EXPOSE 80
I must be doing this at the wrong level as I got the following error:
/bin/sh: 1: cannot create /etc/nginx/conf.d/my_proxy.conf: Directory nonexistent
I tried start “bash” on the container and SSH into an example instance based off this but could not seem to find my around to find the nginx container.
Also I was thinking of modifying the recipe https://github.com/Buzzy-Buzz/opsworks-docker/blob/master/nginx-proxy/recipes/setup-nginx-proxy.rb to include it here… but was not sure if this made sense?
Anyway, looking forward to speaking tomorrow.
I’m trying to figure out how to deploy my Meteor app with Docker myself, so a few questions if you don’t mind @jkatzen. I’m currently set on DigitalOcean, but am open to using e.g. OpsWorks if that’s a better idea.
I see you’re basing your Docker image on meteorhacks/meteord, is this recommended over using the Phusion Passenger NodeJS Docker image as a base? If so, why?
Why would you eventually recommend going with OpsWorks over DigitalOcean? Can I achieve the same with DO?
I used the meteorhacks/meteord image because it was just the quickest way for us to get up and running. I honestly don’t know too much about the Phusion image, so I can’t speak to it much. I imagine that if you wish to use it as a base image and then build your own docker image from it using a Dockerfile, that should not be too difficult. Once your image is built, and you have verified it works, then you can upload it to the dockerhub registry or somewhere else.
The reason we used OpsWorks was because our entire infrastructure was already on AWS and we did not want to have to work between different platforms just yet. OpsWorks had enough tools and customization options for us that we have made it our primary deployment option.
I know a lot of people use DigitalOcean as their hosting platform and honestly it looks great. I would imagine that you can get pretty close to a similar setup on DO instead of OpsWorks, but again I can’t say anything for certain since I have never used the platform myself. If there is an autodeployment that you can configure, that would probably be the way to go. Otherwise you may have to setup your own automated deployment somehow that will pull down your docker image from whatever registry you are using and then runs the docker container on your servers.
Thanks for your thoughtful answer @jkatzen. If you’ve got the time, maybe you could chime in in my “Dockerizing Meteor” thread?
I’m really new to Web apps deployment, and while I have a certain idea of what I want to accomplish I’m not sure how to get there. My core idea is I want production and a staging instances of my app (the latter for testing against), and to be able to switch the staging instance out for the production instance seamlessly in order to release a new version. I have a vague idea that I could use a load balancer to migrate from one instance to the other, but don’t know how it works in practice.
If you could provide some practical advice on how to reach my goal, that would be fantastic!
@jkatzen thanks heaps, again, for you time today. On that issue with the http -> https redirect .
Based on this should I change the return 503 with 301 https://$server_name$request_uri;
on line https://github.com/jwilder/nginx-proxy/blob/master/nginx.tmpl#L37
thoughts?
@jkatzen I found the issue why I could not start up the 2nd stack… I had spaces int he “Stack Name”, not sure why I didn’t see that in the error earlier today. here’s the extract of the compiled/generated command --restart=always -h Buzzy Docker Test Env 1-buzzytest2 -v /etc/nginx/certs so it’s the “Buzzy Docker Test Env 1-buzzytest2” (generated by line 75 below) that was causing the issue.
# In /var/lib/aws/opsworks/cache.stage2/cookbooks/owdocker/recipes/docker-image-deploy.rb
72: bash "docker-run" do
73: user "root"
74: code <<-EOH
75: docker run #{dockerenvs} --restart=always -h #{hostname} -v /etc/nginx/certs -p #{node[:opsworks][:instance][:private_ip]}:8080:80 --name #{deploy[:application]} -d #{deploy[:environment_variables][:registry_image]}:#{deploy[:environment_variables][:registry_tag]}
76: EOH
77: end
78: Chef::Log.info('docker-run stop')
79: end
80: Chef::Log.info("Exiting docker-image-deploy")
Perhaps we need that in the instructions and/or some code to try and deal with that? Once I had removed the spaces from the Stack name it worked.
@jkatzen ow goes? Wondering if you have any thoughts on this 503 vs 301 .
also, I was a bit confused on how I’d get the nginx docker to pickup my own recipe instead of the jwilder one.
I assume I am cloning the jwilder/nginx docker as we did the other day but was not sure how to tell that docker to use my chef script with " 301 https://$server_name$request_uri;"instead?
@adamgins - glad you found out about the stackname - thanks!
The 503/301 thing kind of confuses me because I see https://github.com/jwilder/nginx-proxy/blob/master/nginx.tmpl#L89 which should tell the host to auto-redirect specifically for the virtual hosts that you have setup. You should still be able to use a custom template file though and I think that may work.
Changing return 503 to return 301 https://$server_name$request_uri; will return you https://_ for the entire server if you change it there since _ is specified as the server_name.
server {
listen 80 default_server;
# This is just an invalid value which will never
# trigger on a real hostname.
server_name _;
return 503;
}
You can see on line 89 of that same file though, when it’s specifying the blocks for each virtual host, it has instead the server_name as your host variable and it does in fact try to send a 301 redirect.
If you want to go ahead though and specify a custom template file where you tell it the server name will always be your host, that would work, however you will lost the ability to use multiple hosts on a single machine. (ex. using AWS EC2 instance hostname + your domain hostname)
For some reason I’m getting the following error when i deploy my app, any ideas why?
Thanks @jkatzen yep, it worked for hardcoded, but as you say that makes it tricky to deploy on dev/test servers without having to rebuild the image. Is there a variable I can use in that line 36??
Something like $hostname below:
$hostname; returned some weird number/id… about to try $host but just guessing here
server {
listen 80 default_server;
server_name $hostname;
return 301 https://$server_name$request_uri;
}
@arjunrajjain my guess is you have a space in one of the names so the string is broken and it’s picking up “}” or something. If you search for “error” further up in the log file you can see the chef code followed by what was generated… it may have a really long command you can you need to scroll to the right… from there you’ll see the code it’s complaining about and that should give an idea which variable it is that it’s having heartburn with. I removed spaces from all app, stack and any other names. Alternatively, some of the environment variables may need quotes around them.
@arjunrajjain - you have a git submodule somewhere in your github repo and chef is complaining when it’s trying to copy it down.
@adamgins - settings server_name to $hostname is not going to work because $hostname was never defined. $host should work as follows though (taken from nginx documentation):
$host
This variable is equal to line Host in the header of request or name of the server processing the request if the Host header is not available.@jkatzen thanks that did it. BTW< I was getting some pretty strange behavior when I hard coded the domain name. The strange behavior was it seemed to work in desktop browsers but then sometimes from the cordova app it seemed to have issues connecting.
I saw some things in the log like:
Apr 15 05:26:05 Buzzy-Docker-buzzy1 nginx-proxy: nginx.1 | 2015/04/14 19:26:05 [error] 27#0: *5612 upstream prematurely closed connection while reading response header from upstream, client: <my ip address> server:<server sub-domain but weird I was not hitting this sub-domain> request: "GET /_timesync HTTP/1.1", upstream: "http://172.17.0.7:80/_timesync", host: "<main domain>", referrer: "https://<main-domain>/<some url>"
So I’m super close to getting everything working, but I’m having a final problem with Cordova. Whenever I build the app without (meteor add-platform ios android), everything works fine. But as soon as I add both platforms, i get the following -
Looks like you are having the same issue as these people: https://github.com/meteor/meteor/issues/4207
Ahh looks like the cordova repository itself is having problems…hopefully that gets fixed soon.
Otherwise now I’ve finally got opsworks up and running, however my android app is not pulling in the latest site (its using a cache one). Do I need to add http://meteor.local to my mobile.settings as one of the urls to allow access?
So, I got this up and going and I thought all was well. However, I’ve had some reports of some people getting 503’s. I used a wildcard in my VIRTUAL_HOST env var *.mydomain.com. WGET seems to confirm something’s amiss:
wget mydomain.com
--2015-04-15 22:31:27-- http://mydomain.com/
Resolving mydomain.com (mydomain.com)... 52.8.x.y
Connecting to mydomain.com (mydomain.com)|52.8.x.y|:80... connected.
HTTP request sent, awaiting response... 503 Service Temporarily Unavailable
2015-04-15 22:31:27 ERROR 503: Service Temporarily Unavailable.
Can anyone explain why this might be happening?
Also, I’d like to redir all www. requests to just mydomain.com. I assume I’d need to fork the nginx-proxy repo and make changes there? Or can I just inject the redir in the chef recipes?
TIA for any tips/advice!
anyone getting this problem while pushing to docker hub?
