standardized docker-compose to 1 single image

3 files changed, 97 insertions, 27 deletions

diff --git a/data/proxy/nginx/log/.keep b/data/proxy/nginx/log/.keep
deleted file mode 100644
index e69de29..0000000
--- a/data/proxy/nginx/log/.keep
+++ /dev/null
diff --git a/data/proxy/nginx/sites.template.scalelite-local b/data/proxy/nginx/sites.template.scalelite-local
index e5b8170..dfb5f97 100644
--- a/data/proxy/nginx/sites.template.scalelite-local
+++ b/data/proxy/nginx/sites.template.scalelite-local
@@ -37,39 +37,28 @@ server {
     #ssl_certificate /etc/ssl/fullchain.pem;
     #ssl_certificate_key /etc/ssl/privkey.pem;
 
-    location /bigbluebutton/api/ {
+    location /health_check {
         proxy_pass  http://docker-scalelite-api;
+        include /etc/nginx/sites-common;
+    }
 
-        proxy_read_timeout 60s;
-        proxy_redirect off;
-
-        proxy_set_header  Host $http_host;
-
-        proxy_set_header  X-Real-IP $remote_addr;
-        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
-
-        proxy_set_header  X-Forwarded-Proto $scheme;
-
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
+    location /bigbluebutton/api/ {
+        proxy_pass  http://docker-scalelite-api;
+        include /etc/nginx/sites-common;
     }
 
-    location / {
+    location /presentation/ {
         proxy_pass  http://docker-scalelite-recordings;
+        include /etc/nginx/sites-common;
+    }
 
-        proxy_read_timeout 60s;
-        proxy_redirect off;
-
-        proxy_set_header  Host $http_host;
-
-        proxy_set_header  X-Real-IP $remote_addr;
-        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
-
-        proxy_set_header  X-Forwarded-Proto $scheme;
+    location /playback/ {
+        proxy_pass  http://docker-scalelite-recordings;
+        include /etc/nginx/sites-common;
+    }
 
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
+    location / {
+        proxy_pass http://docker-scalelite-api/health_check;
+        include /etc/nginx/sites-common;
     }
 }
diff --git a/data/redis/conf/redis.conf b/data/redis/conf/redis.conf
new file mode 100644
index 0000000..eb0fe99
--- /dev/null
+++ b/data/redis/conf/redis.conf
@@ -0,0 +1,81 @@
+bind 0.0.0.0
+protected-mode no
+masterauth "redisTLSTest2021@@"
+requirepass "redisTLSTest2021@@"
+port 0
+tcp-backlog 511
+timeout 300
+tcp-keepalive 300
+daemonize no
+supervised no
+pidfile /var/run/redis.pid
+loglevel notice
+#logfile "/var/log/redis/redis.log"
+databases 16
+always-show-logo no
+stop-writes-on-bgsave-error yes
+rdbcompression yes
+rdbchecksum yes
+# The filename where to dump the DB
+dbfilename dump_6479.rdb
+replica-serve-stale-data yes
+replica-read-only yes
+repl-diskless-sync no
+repl-diskless-sync-delay 5
+repl-timeout 60
+repl-disable-tcp-nodelay no
+replica-priority 100
+maxclients 10000
+# maxmemory-policy noeviction
+lazyfree-lazy-eviction no
+lazyfree-lazy-expire no
+lazyfree-lazy-server-del no
+replica-lazy-flush no
+appendonly yes
+appendfilename "appendonly.aof"
+appendfsync everysec
+no-appendfsync-on-rewrite no
+auto-aof-rewrite-percentage 100
+auto-aof-rewrite-min-size 64mb
+aof-load-truncated yes
+aof-use-rdb-preamble yes
+lua-time-limit 5000
+cluster-config-file redis_cluster.conf
+cluster-node-timeout 15000
+cluster-enabled yes
+# cluster-replica-validity-factor 10
+# cluster-require-full-coverage yes
+slowlog-log-slower-than 10000
+slowlog-max-len 128
+latency-monitor-threshold 0
+notify-keyspace-events ""
+list-max-ziplist-size -2
+activerehashing yes
+client-output-buffer-limit normal 0 0 0
+client-output-buffer-limit replica 256mb 64mb 60
+client-output-buffer-limit pubsub 32mb 8mb 60
+hz 10
+dynamic-hz yes
+rdb-save-incremental-fsync yes
+### TLS
+tls-port 7379
+tls-cert-file /etc/letsencrypt/archive/sl.jesus.123it.ca/cert3.pem
+tls-key-file /etc/letsencrypt/archive/sl.jesus.123it.ca/privkey3.pem
+tls-ca-cert-file /etc/letsencrypt/archive/sl.jesus.123it.ca/chain3.pem
+tls-auth-clients no
+
+# tls-auth-clients optional
+
+tls-replication yes
+tls-cluster yes
+
+# Explicitly specify TLS versions to support. Allowed values are case insensitive
+# and include "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" (OpenSSL >= 1.1.1) or
+# any combination. To enable only TLSv1.2 and TLSv1.3, use:
+#
+tls-protocols "TLSv1.2 TLSv1.3"
+
+# By default, TLS session caching is enabled to allow faster and less expensive
+# reconnections by clients that support it. Use the following directive to disable
+# caching.
+tls-session-caching no