From 8b2e14277aceab2ffc79724298155583a61333fa Mon Sep 17 00:00:00 2001 From: Michael Jerger Date: Wed, 28 Feb 2024 15:27:21 +0100 Subject: [PATCH] imabe listens on 80 // log-files are linked to stdout --- src/main/resources/website/nginx-configmap.yaml | 8 ++++---- src/main/resources/website/nginx-deployment.yaml | 9 +++++---- src/main/resources/website/nginx-service.yaml | 2 +- 3 files changed, 10 insertions(+), 9 deletions(-) diff --git a/src/main/resources/website/nginx-configmap.yaml b/src/main/resources/website/nginx-configmap.yaml index 47aa4df..7aeab09 100644 --- a/src/main/resources/website/nginx-configmap.yaml +++ b/src/main/resources/website/nginx-configmap.yaml @@ -9,7 +9,7 @@ data: nginx.conf: | user nginx; worker_processes 3; - error_log stdout info; + error_log /var/log/nginx/error.log; info; pid /var/log/nginx/nginx.pid; worker_rlimit_nofile 8192; events { @@ -21,7 +21,7 @@ data: log_format main '$remote_addr - $remote_user [$time_local] $status' '"$request" $body_bytes_sent "$http_referer"' '"$http_user_agent" "$http_x_forwarded_for"'; - access_log stdout main; + access_log /var/log/nginx/access.log; main; sendfile on; tcp_nopush on; keepalive_timeout 65; @@ -80,8 +80,8 @@ data: } website.conf: | server { - listen 8080 default_server; - listen [::]:8080 default_server; + listen 80 default_server; + listen [::]:80 default_server; server_name FQDN add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload'; add_header X-Frame-Options "SAMEORIGIN"; diff --git a/src/main/resources/website/nginx-deployment.yaml b/src/main/resources/website/nginx-deployment.yaml index 4da29a0..8ccbb55 100644 --- a/src/main/resources/website/nginx-deployment.yaml +++ b/src/main/resources/website/nginx-deployment.yaml @@ -22,13 +22,14 @@ spec: image: nginx:latest imagePullPolicy: IfNotPresent ports: - - containerPort: 8080 + - containerPort: 80 + command: [ "/bin/bash", "-c", "nginx -g 'daemon off;'" ] volumeMounts: - mountPath: /etc/nginx readOnly: true name: etc-nginx - - mountPath: /var/log/nginx - name: log + - mountPath: /tmp + name: tmp - mountPath: /var/www/html/website name: content-volume readOnly: true @@ -63,7 +64,7 @@ spec: path: conf.d/website.conf - key: mime.types path: mime.types - - name: log + - name: tmp emptyDir: {} - name: content-volume persistentVolumeClaim: diff --git a/src/main/resources/website/nginx-service.yaml b/src/main/resources/website/nginx-service.yaml index 0d39a26..a785d5e 100644 --- a/src/main/resources/website/nginx-service.yaml +++ b/src/main/resources/website/nginx-service.yaml @@ -11,4 +11,4 @@ spec: app: nginx ports: - name: nginx-http - port: 8080 + port: 80