diff --git a/docker-compose.yml b/docker-compose.yml index 2af45d6aaca3c813d38431cd3b83b6c08b55a51a..ff785ce07ee1940b3a67c55fd5775bf32bbfcda8 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,6 +1,21 @@ version: '3.4' services: + nginx: + image: nginx:latest + container_name: nginx + volumes: + - ./nginx:/etc/nginx/certs + - ./nginx/nginx.conf:/etc/nginx/nginx.conf + ports: + - "8080:8080" + depends_on: + - cache + - policy + - task + - signer + - infohub + policy: container_name: policy build: diff --git a/nginx/localhost-key.pem b/nginx/localhost-key.pem new file mode 100644 index 0000000000000000000000000000000000000000..0e37a785eef680a0dc4a3233b704c5bcc448961d --- /dev/null +++ b/nginx/localhost-key.pem @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDI2WaKCEMBBCSc +sGzo8X0n57ETQH0bgDq8ZPuIpGMFFqtJsgvEX2ZDANzhSIfmmwjMmArYYEnGxOJL +UEEfb3ibvKrbafFuvaeUwitnrObkCs6zA+JLSEQesOXnVTs1TVrk+/zxjb6MNLrY +BDIXoKNloLrSjVX1oQrMnn/Op4cThc8UUFa/9zA25bzdOcSLfcz7l/0pM2aUyEO1 +AywklYyrI6p6NBA0xfa5DzXSnW1/uO0BQUWs/XwZF2GjWvOCdAelHnNKPLChNgLR +JKi9em+8LxOm0v4znw8imlhDKuvcaNLvMFxqfIvIc/dcwgupVfOSnbtGNqN9xDTC +nJhXvT4vAgMBAAECggEBAMXKahNGnY1zogZ4K1ie8AyLOzNlT470kWMT4y0mDalm +MJprbvEcrZ0QTXTBs6uiQ2EP3aZF9IF9RAi86NTnNpPPkUZwJ2VR+aUiLhJ0EBDE +n9dk3MYcTZEXzeApbBxKqFdV3DuYxexWxSWTxCzGcgLT7QcKTnuM8xCciepdykSq +wwLNZBi+gD77hWUdm9XlHG+4oQSyIxN1wBPwo90Q8bLONYAj/MDv9ilHEUEoINF2 +FLHrte9KLTOUEaBUHyQtOaVSRRtdWmsjV01olsGPv3br9NSoBOnszcsb2XyEqG1I +kz8JfltKRII7KD+JCqLyTVlyvx+0zcVN7PEY85uxP5ECgYEA74PQU5hJLXE+YhhK +tqS2TT+NIe7hcbsK1oBWk6hO/+CcvrWSftSAUk8I7csOQVg6q4pcAaFkFFQ2PmSo +DGQU+iH6UET2W2FmtiVT7yMkLex3LBiPpKrWQolyc9/VjCR4EhutWnuT40YICU2o +csXmzk2h20d4C4xkiW/N5U24SHcCgYEA1qxO6QbJTxhp5gy6qOXqL32y/k2Y4EcF +Mi0XWGwSo9yggRjZEJ3j5qjHc87U3JYF0UHmd99xUy7z+WZVg/LaM0q6hURDLjAx +uY0aOKwPyFHldz4+3oO8a6vBsMPrYwDKeDMNWlRjPyKJ2BTQkEjwhdZRywioRYhQ +0kBkFRxRXgkCgYEAguq7vlWo+gvCG4BHplmVw9eO3xNhavbfz6tKp18B/17Yjm1U +67pfgZ3ttXyeCB2fxA/WhpWezHXTSHtgV5WE2cwktCdduUkeCUWSAU5mAiwUX6f1 +K/6tKqVSR//7C6ULdGpocOLHTR0EW4F1J3cA15cbd24zMazFb1ILauD2b7UCgYEA +zdDbwvyXqvacKUyQ9XehJDEemEPrSzOsHqQumr7azDGtzLf2/MB0DORKfZSSbn6D +S1IkVU9rxjXhAX8EhAIlA0IlO7nrsu/P7LcEqcsFQqiKGN4bxpiE4LIGfKQKHJxY +gg9oQO9hS9mgUQP7xim4OIj3WHKPakK8QigsDDVfKYkCgYAZaImpzZ4rAwf3T5a7 +EaMndSPwXQcXiuQoBzaKh+5GmvxnuUONoWBrAGFPxVBU8FjciOup25K/BfKcwqWt +qTnmQkt+ZZmHIezzLR8/dvui9hNCGPGk1ft7hmcMkYjIIswFaFivG6INuKPKTkWj +awngMUa2qk+j53AXCj5aRsfKaQ== +-----END PRIVATE KEY----- diff --git a/nginx/localhost.crt b/nginx/localhost.crt new file mode 100644 index 0000000000000000000000000000000000000000..100da41d87ed074c7195c8e50fac5f1bff752d2c --- /dev/null +++ b/nginx/localhost.crt @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIERjCCAq6gAwIBAgIQEdwdrjwvQ9p4J5XgHJljZDANBgkqhkiG9w0BAQsFADCB +hTEeMBwGA1UEChMVbWtjZXJ0IGRldmVsb3BtZW50IENBMS0wKwYDVQQLDCRsdWJl +bkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkxNDAyBgNVBAMMK21rY2Vy +dCBsdWJlbkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkwHhcNMjIwNjI4 +MTQzMjA4WhcNMjQwOTI4MTQzMjA4WjBYMScwJQYDVQQKEx5ta2NlcnQgZGV2ZWxv +cG1lbnQgY2VydGlmaWNhdGUxLTArBgNVBAsMJGx1YmVuQG1hYzE2LmxvY2FsIChM +eXViZW4gUGVua292c2tpKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +AMjZZooIQwEEJJywbOjxfSfnsRNAfRuAOrxk+4ikYwUWq0myC8RfZkMA3OFIh+ab +CMyYCthgScbE4ktQQR9veJu8qttp8W69p5TCK2es5uQKzrMD4ktIRB6w5edVOzVN +WuT7/PGNvow0utgEMhego2WgutKNVfWhCsyef86nhxOFzxRQVr/3MDblvN05xIt9 +zPuX/SkzZpTIQ7UDLCSVjKsjqno0EDTF9rkPNdKdbX+47QFBRaz9fBkXYaNa84J0 +B6Uec0o8sKE2AtEkqL16b7wvE6bS/jOfDyKaWEMq69xo0u8wXGp8i8hz91zCC6lV +85Kdu0Y2o33ENMKcmFe9Pi8CAwEAAaNeMFwwDgYDVR0PAQH/BAQDAgWgMBMGA1Ud +JQQMMAoGCCsGAQUFBwMBMB8GA1UdIwQYMBaAFOuFVZoLYR9kklm7EHV8U2aI4a8J +MBQGA1UdEQQNMAuCCWxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAYEAjVZvoB80 +Lz23QpL5Al6ep8FroAe5bBpwpp/XkEpartzDQ4HLUq5cAGACB7XCwFxWLidsS8VU +QUIt8AH1kbkHBi7duVR+/xQ8JBw0u8t1Yh/rKKC8FKH4Tr/6XCxF3Z2FcFBJCNTV +vtisis5V1MwoTUt2AwA/1tZ23EcmfFT6f5OdmCnJWAYGaS//V/0UKgy/u66R/k1R +7gBaYphctgfXf1zGQ3K+8bXvpB+S6UMk65GqLpjjp4oKnHB8bbtb97fFlg+V/xRQ +8SPtM8utNiXkRpT1DK9n7JfzWEnimIGwXSLHGUckNGsT5M6wIHNlsltnwwnCmIG5 +FvDqrWk8uccR2gAuxsLu2W4J/HxddV8T81+xW8z4pjFAsuXgypOPq7d6IVJDIkDK +/vEbBKLehDn7pL/2hRgXrJs0LNjACu/EbPxT0PkasZ/qLHYw9luJ7TdkS/uxN3oS +1aRl12IgTrkp/8CuFep5OzePKAYUdaNLdKCJDkIDisS4kb/S42kfcBEA +-----END CERTIFICATE----- diff --git a/nginx/localhost.key b/nginx/localhost.key new file mode 100644 index 0000000000000000000000000000000000000000..0e37a785eef680a0dc4a3233b704c5bcc448961d --- /dev/null +++ b/nginx/localhost.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDI2WaKCEMBBCSc +sGzo8X0n57ETQH0bgDq8ZPuIpGMFFqtJsgvEX2ZDANzhSIfmmwjMmArYYEnGxOJL +UEEfb3ibvKrbafFuvaeUwitnrObkCs6zA+JLSEQesOXnVTs1TVrk+/zxjb6MNLrY +BDIXoKNloLrSjVX1oQrMnn/Op4cThc8UUFa/9zA25bzdOcSLfcz7l/0pM2aUyEO1 +AywklYyrI6p6NBA0xfa5DzXSnW1/uO0BQUWs/XwZF2GjWvOCdAelHnNKPLChNgLR +JKi9em+8LxOm0v4znw8imlhDKuvcaNLvMFxqfIvIc/dcwgupVfOSnbtGNqN9xDTC +nJhXvT4vAgMBAAECggEBAMXKahNGnY1zogZ4K1ie8AyLOzNlT470kWMT4y0mDalm +MJprbvEcrZ0QTXTBs6uiQ2EP3aZF9IF9RAi86NTnNpPPkUZwJ2VR+aUiLhJ0EBDE +n9dk3MYcTZEXzeApbBxKqFdV3DuYxexWxSWTxCzGcgLT7QcKTnuM8xCciepdykSq +wwLNZBi+gD77hWUdm9XlHG+4oQSyIxN1wBPwo90Q8bLONYAj/MDv9ilHEUEoINF2 +FLHrte9KLTOUEaBUHyQtOaVSRRtdWmsjV01olsGPv3br9NSoBOnszcsb2XyEqG1I +kz8JfltKRII7KD+JCqLyTVlyvx+0zcVN7PEY85uxP5ECgYEA74PQU5hJLXE+YhhK +tqS2TT+NIe7hcbsK1oBWk6hO/+CcvrWSftSAUk8I7csOQVg6q4pcAaFkFFQ2PmSo +DGQU+iH6UET2W2FmtiVT7yMkLex3LBiPpKrWQolyc9/VjCR4EhutWnuT40YICU2o +csXmzk2h20d4C4xkiW/N5U24SHcCgYEA1qxO6QbJTxhp5gy6qOXqL32y/k2Y4EcF +Mi0XWGwSo9yggRjZEJ3j5qjHc87U3JYF0UHmd99xUy7z+WZVg/LaM0q6hURDLjAx +uY0aOKwPyFHldz4+3oO8a6vBsMPrYwDKeDMNWlRjPyKJ2BTQkEjwhdZRywioRYhQ +0kBkFRxRXgkCgYEAguq7vlWo+gvCG4BHplmVw9eO3xNhavbfz6tKp18B/17Yjm1U +67pfgZ3ttXyeCB2fxA/WhpWezHXTSHtgV5WE2cwktCdduUkeCUWSAU5mAiwUX6f1 +K/6tKqVSR//7C6ULdGpocOLHTR0EW4F1J3cA15cbd24zMazFb1ILauD2b7UCgYEA +zdDbwvyXqvacKUyQ9XehJDEemEPrSzOsHqQumr7azDGtzLf2/MB0DORKfZSSbn6D +S1IkVU9rxjXhAX8EhAIlA0IlO7nrsu/P7LcEqcsFQqiKGN4bxpiE4LIGfKQKHJxY +gg9oQO9hS9mgUQP7xim4OIj3WHKPakK8QigsDDVfKYkCgYAZaImpzZ4rAwf3T5a7 +EaMndSPwXQcXiuQoBzaKh+5GmvxnuUONoWBrAGFPxVBU8FjciOup25K/BfKcwqWt +qTnmQkt+ZZmHIezzLR8/dvui9hNCGPGk1ft7hmcMkYjIIswFaFivG6INuKPKTkWj +awngMUa2qk+j53AXCj5aRsfKaQ== +-----END PRIVATE KEY----- diff --git a/nginx/localhost.pem b/nginx/localhost.pem new file mode 100644 index 0000000000000000000000000000000000000000..100da41d87ed074c7195c8e50fac5f1bff752d2c --- /dev/null +++ b/nginx/localhost.pem @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIERjCCAq6gAwIBAgIQEdwdrjwvQ9p4J5XgHJljZDANBgkqhkiG9w0BAQsFADCB +hTEeMBwGA1UEChMVbWtjZXJ0IGRldmVsb3BtZW50IENBMS0wKwYDVQQLDCRsdWJl +bkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkxNDAyBgNVBAMMK21rY2Vy +dCBsdWJlbkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkwHhcNMjIwNjI4 +MTQzMjA4WhcNMjQwOTI4MTQzMjA4WjBYMScwJQYDVQQKEx5ta2NlcnQgZGV2ZWxv +cG1lbnQgY2VydGlmaWNhdGUxLTArBgNVBAsMJGx1YmVuQG1hYzE2LmxvY2FsIChM +eXViZW4gUGVua292c2tpKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +AMjZZooIQwEEJJywbOjxfSfnsRNAfRuAOrxk+4ikYwUWq0myC8RfZkMA3OFIh+ab +CMyYCthgScbE4ktQQR9veJu8qttp8W69p5TCK2es5uQKzrMD4ktIRB6w5edVOzVN +WuT7/PGNvow0utgEMhego2WgutKNVfWhCsyef86nhxOFzxRQVr/3MDblvN05xIt9 +zPuX/SkzZpTIQ7UDLCSVjKsjqno0EDTF9rkPNdKdbX+47QFBRaz9fBkXYaNa84J0 +B6Uec0o8sKE2AtEkqL16b7wvE6bS/jOfDyKaWEMq69xo0u8wXGp8i8hz91zCC6lV +85Kdu0Y2o33ENMKcmFe9Pi8CAwEAAaNeMFwwDgYDVR0PAQH/BAQDAgWgMBMGA1Ud +JQQMMAoGCCsGAQUFBwMBMB8GA1UdIwQYMBaAFOuFVZoLYR9kklm7EHV8U2aI4a8J +MBQGA1UdEQQNMAuCCWxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAYEAjVZvoB80 +Lz23QpL5Al6ep8FroAe5bBpwpp/XkEpartzDQ4HLUq5cAGACB7XCwFxWLidsS8VU +QUIt8AH1kbkHBi7duVR+/xQ8JBw0u8t1Yh/rKKC8FKH4Tr/6XCxF3Z2FcFBJCNTV +vtisis5V1MwoTUt2AwA/1tZ23EcmfFT6f5OdmCnJWAYGaS//V/0UKgy/u66R/k1R +7gBaYphctgfXf1zGQ3K+8bXvpB+S6UMk65GqLpjjp4oKnHB8bbtb97fFlg+V/xRQ +8SPtM8utNiXkRpT1DK9n7JfzWEnimIGwXSLHGUckNGsT5M6wIHNlsltnwwnCmIG5 +FvDqrWk8uccR2gAuxsLu2W4J/HxddV8T81+xW8z4pjFAsuXgypOPq7d6IVJDIkDK +/vEbBKLehDn7pL/2hRgXrJs0LNjACu/EbPxT0PkasZ/qLHYw9luJ7TdkS/uxN3oS +1aRl12IgTrkp/8CuFep5OzePKAYUdaNLdKCJDkIDisS4kb/S42kfcBEA +-----END CERTIFICATE----- diff --git a/nginx/nginx.conf b/nginx/nginx.conf new file mode 100644 index 0000000000000000000000000000000000000000..fd4d514606c8ce20edbadb7e311969cf678c2b28 --- /dev/null +++ b/nginx/nginx.conf @@ -0,0 +1,37 @@ +events { } + +http { + # For paths with "-". No idea why it works. + server_names_hash_bucket_size 64; + client_max_body_size 64m; + + server { + listen 8080 ssl; + ssl_certificate /etc/nginx/certs/localhost.crt; + ssl_certificate_key /etc/nginx/certs/localhost.key; + + location /policy/policy/example/returnDID/1.0/evaluation/did.json { + proxy_pass http://policy:8080/policy/example/returnDID/1.0/evaluation; + } + + location /policy/ { + proxy_pass http://policy:8080/; + } + + location /cache/ { + proxy_pass http://cache:8080/; + } + + location /task/ { + proxy_pass http://task:8080/; + } + + location /signer/ { + proxy_pass http://signer:8080/; + } + + location /infohub/ { + proxy_pass http://infohub:8080/; + } + } +}