Springboot和angular Container之间的HTTPS通信使用https与nginx

Question

我有两个Docker容器，spring boot和Angular。

此外，我在Ubuntu中安装了Nginx。

我有这个conf文件Nginx来使用HTTPS重定向Angular应用程序

  server {
root /var/www/html;
        server_name dev.xxxxx.io www.dev.xxxxx.io;
        location / {
            proxy_pass         http://127.0.0.1:8080;  # Angular container port
        
        proxy_redirect     off;
            proxy_set_header   Host $host;
            proxy_set_header   X-Real-IP $remote_addr;
            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header   X-Forwarded-Host $server_name;
            proxy_set_header   X-Forwarded-Proto $scheme;
        }

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/dev.xxxxx.io/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/dev.xxxxx.io/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}
server {
    if ($host = www.dev.xxxxx.io) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = dev.xxxxx.io) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        listen 80; 
        listen [::]:80;
        server_name dev.xxxx.io www.dev.xxxxx.io;
    return 404; # managed by Certbot

我的angular容器使用端口8080:80运行(docker文件很简单), Springboot容器使用端口8181:8181运行当我用https://xx.xx.xx.xx:8181更改Angular中的环境文件时，我出现了一个错误，因为后端(Springboot)没有像https那样配置。

Answer 1

转到端口8181时，您直接指向Spring Boot容器，该容器显然没有在端口8181上使用HTTPS运行。

我想你应该指向你的NGINX来处理SSL终止，所以你需要设置另一个重定向到你的应用的代理。如果没有，您可以将SSL添加到Spring Boot应用程序，但无法使用Certbot刷新证书（您似乎正在使用它，因为我可以在nginx.conf文件中看到有关它的注释）

您可以使用不同的路径或不同的端口来执行此操作。

root /var/www/html;
    server_name dev.xxxxx.io www.dev.xxxxx.io;
    location / {
        proxy_pass         http://127.0.0.1:8080;  # Angular container port
    
        proxy_redirect     off;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-Proto $scheme;
    }

    ### Addition start ###
    location /api {
        proxy_pass         http://127.0.0.1:8181/api;  # Spring container port and path (add context path to Spring boot as well)
    
        proxy_redirect     off;
        proxy_set_header   Host $host;
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Host $server_name;
        proxy_set_header   X-Forwarded-Proto $scheme;
    }
    ### Addition end ###

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/dev.xxxxx.io/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/dev.xxxxx.io/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

然后将Angular应用程序更改为调用https://dev.xxxxx.io/api

要添加上下文路径，请将server.servlet.context-path=/api添加到application.properties（或yaml）

P、 S：我不是100%确定您需要更改上下文路径，但如果您不这样做，我似乎还记得一些问题。