通过nginx代理的Docker环境导致502坏网关

Question

我正在使用nginx-proxy将子域连接到不同的docker服务。自从最近的一次图像更新后，我再也无法连接到我的gitlab实例了。我不知道是nginx-proxy还是gitlab更新导致了这个问题。当我尝试连接到gitlab.mydomain.com时，会出现以下错误：

>

浏览器：502坏网关。nginx/1.13.3

nginx-代理日志：

nginx-proxy_1 nginx.1 2017/08/14 11:44:10[错误]39#39:*1672连接到上游时connect（）失败（111：拒绝连接），客户端:178.2011.120.94，服务器:gitlab.mydomain.com，请求：“get/http/2.0”，上游：“https://172.18.0.2:443/，主机：”gitlab.mydomain.com“

nginx-proxy_1 nginx.1 gitlab.mydomain.com 178.201.120.94-[14/aug/2017:11:44:10+0000]“get/http/2.0”502 575“-”mozilla/5.0（Windows NT 10.0；Win64；x64)AppleWebKit/537.36（KHTML,like Gecko）Chrome/60.0.3112.90 Safari/537.36“

nginx-proxy_1 nginx.1 2017/08/14 11:44:11[错误]39#39:*1672连接到上游时连接（）失败（111：拒绝连接），客户端:178.2011.120.94，服务器:gitlab.mydomain.com，请求：“get/favicon.ico http/2.0”，上游：“https://172.18.0.2:443/favicon.ico”，主机：“gitlab.mydomain.com”，引用者：“https://gitlab.***.com/”

我的docker-compose文件：

version: '2'

services:
   nginx-proxy:
     image: jwilder/nginx-proxy
     ports:
     - "80:80"
     - "443:443"
     volumes:
     - /var/local/nginx/certs:/etc/nginx/certs
     - /etc/letsencrypt:/etc/letsencrypt
     - /var/run/docker.sock:/tmp/docker.sock:ro

   gitlab:
     image: gitlab/gitlab-ce:latest
     ports:
     - "2222:22"
     hostname: 'gitlab.***.com'
     expose:
     - 443
     - 22
     - 80
     - 25
     environment:
     - "VIRTUAL_HOST=gitlab.***.com,www.gitlab.***.com"
     - "VIRTUAL_PORT=443"
     - "VIRTUAL_PROTO=https"
     volumes:
     - "gitlab-config:/etc/gitlab"
     - "gitlab-log:/var/log/gitlab"
     - "gitlab-data:/var/opt/gitlab"
     - "/etc/letsencrypt:/etc/letsencrypt"

对此有什么想法吗？谢谢。
编辑：来自docker inspect Gitlab的Networksettings：

    "NetworkSettings": {
        "Bridge": "",
        "SandboxID": "...",
        "HairpinMode": false,
        "LinkLocalIPv6Address": "",
        "LinkLocalIPv6PrefixLen": 0,
        "Ports": {
            "22/tcp": [
                {
                    "HostIp": "0.0.0.0",
                    "HostPort": "2222"
                }
            ],
            "25/tcp": null,
            "443/tcp": null,
            "80/tcp": null
        },
        "SandboxKey": "/var/run/docker/netns/...",
        "SecondaryIPAddresses": null,
        "SecondaryIPv6Addresses": null,
        "EndpointID": "",
        "Gateway": "",
        "GlobalIPv6Address": "",
        "GlobalIPv6PrefixLen": 0,
        "IPAddress": "",
        "IPPrefixLen": 0,
        "IPv6Gateway": "",
        "MacAddress": "",
        "Networks": {
            "docker_default": {
                "IPAMConfig": null,
                "Links": null,
                "Aliases": [
                    "abb170528bcc",
                    "gitlab"
                ],
                "NetworkID": "...",
                "EndpointID": "...",
                "Gateway": "172.18.0.1",
                "IPAddress": "172.18.0.2",
                "IPPrefixLen": 16,
                "IPv6Gateway": "",
                "GlobalIPv6Address": "",
                "GlobalIPv6PrefixLen": 0,
                "MacAddress": "02:42:ac:12:00:02"
            }
        }
    }

Answer 1

这个设置对我很有效，也许你可以比较一下，找出问题所在：

https://superuser.com/a/1242682/762931

也许是这样:https://gitlab.com/gitlab-org/omnibus-gitlab/issues/1307