rcj-app-server

Build Status: A very simple frontend for the other RCJ webapps such as rcj-soccer-platform.

It uses NGINX to terminate SSL and route requests through to the other applications. A Python control wrapper manages the NGINX process and generates SSL certificates using Lets Encrypt (tihs only works if the DNS is managed by Vultr). There are many things to do, including automatic NGINX configuration generation, certificate renewal (currently the server must be restarted every 90 days to generate a new cert) and logging of NGINX to STDOUT / STDERR.

(Optional) To build this from source:

docker build -t proxy .

Or just run the pre-compiled version on Docker Hub:

podman run --restart always --pod rcj \
           -d -e "CERT_EMAIL=your@emailaddr.com" \
           -e "DOMAINS_SOCCER=soccer.rcja.org" \
           -e "VULTR_API_KEY=YOUR_VULTR_API_KEY" \
           -e "USE_STAGING=yes" \
           --name rcj_proxy rcjaustralia/rcj-app-server

To run in production, substitute your@email.com, YOUR_VULTR_API_KEY with an API key from Vultr (used for DNS as the acme challenge for Lets Encrypt) and set USE_STAGING to no.

You may also need to open ports 80 and 443 in the firewall:

sudo firewall-cmd --zone=public --add-service=http --permanent
sudo firewall-cmd --zone=public --add-service=https --permanent
sudo firewall-cmd --reload