From 5a874ad71025c61864c93e8a197463b999b5b474 Mon Sep 17 00:00:00 2001 From: Thatsaphorn Atchariyaphap Date: Mon, 9 Jun 2025 10:34:36 +0200 Subject: [PATCH] Update reverse proxy to use lua-resty-openidc image and adjust file paths in `nginx.conf` and `docker-compose.yml` --- docker-compose.yml | 6 +++--- nginx.conf | 7 ++++--- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 393d9e8..f434ee2 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,12 +1,12 @@ services: reverse-proxy: - image: openresty/openresty:alpine + image: ghcr.io/zmartzone/lua-resty-openidc:latest container_name: demo-nginx-proxy ports: - "25700:80" volumes: - - ./nginx.conf:/usr/local/openresty/nginx/conf/nginx.conf:ro - - ./auth.lua:/usr/local/openresty/nginx/conf/auth.lua:ro + - ./nginx.conf:/etc/nginx/nginx.conf:ro + - ./auth.lua:/etc/nginx/auth.lua:ro environment: - KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET} env_file: diff --git a/nginx.conf b/nginx.conf index 51114e3..5a6e499 100644 --- a/nginx.conf +++ b/nginx.conf @@ -5,7 +5,8 @@ events { } http { - lua_package_path "/etc/nginx/lua/?.lua;;"; + lua_package_path "/usr/local/openresty/lualib/?.lua;;"; + lua_shared_dict discovery 1m; lua_shared_dict jwks 1m; lua_shared_dict sessions 10m; @@ -34,7 +35,7 @@ http { # Protected root route (main site) location / { - access_by_lua_file /usr/local/openresty/nginx/conf/auth.lua; + access_by_lua_file /etc/nginx/auth.lua; proxy_pass http://main-website:3000; proxy_set_header Host $host; @@ -45,7 +46,7 @@ http { # Protected demo route location /lawfirm/demo1/ { - access_by_lua_file /usr/local/openresty/nginx/conf/auth.lua; + access_by_lua_file /etc/nginx/auth.lua; rewrite ^/lawfirm/demo1(/.*)$ $1 break; proxy_pass http://ld1:3000;