Merge branch 'add-nginx' into 'main'

TLS Nginx listening on localhost for testing purposes

See merge request !28

docker-compose.yml

 version: '3.4'
 
 services:
+  nginx:
+    image: nginx:latest
+    container_name: nginx
+    volumes:
+      - ./nginx:/etc/nginx/certs
+      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
+    ports:
+      - "8080:8080"
+    depends_on:
+      - cache
+      - policy
+      - task
+      - signer
+      - infohub
+
   policy:
     container_name: policy
     build:
@@ -75,6 +90,7 @@ services:
       - ./env/signer.env
     ports:
       - "8085:8080"
+      - "2112:2112"
     depends_on:
       - vault
 

env/infohub.env

@@ -10,4 +10,4 @@ MONGO_PASS="root"
 CACHE_ADDR="http://cache:8080"
 POLICY_ADDR="http://policy:8080"
 SIGNER_ADDR="http://signer:8080"
-ISSUER_URI="did:ocm:123"
+ISSUER_URI="did:web:17a1-2a00-4802-2c0-9295-59ff-6a60-b735-32ea.eu.ngrok.io:policy:policy:example:returnDID:1.0:evaluation"

env/signer.env

@@ -7,5 +7,5 @@ HTTP_WRITE_TIMEOUT="10s"
 VAULT_ADDR="http://vault:8200"
 VAULT_TOKEN=
 VAULT_SIGNING_KEY="key1"
-VAULT_SUPPORTED_KEYS="ed25519,ecdsa-p256,ecdsa-p384,ecdsa-p521,rsa-2048"
-CREDENTIAL_ISSUER="http://signer:8080/v1/keys"
+VAULT_SUPPORTED_KEYS="ed25519,ecdsa-p256,ecdsa-p384,ecdsa-p521"
+CREDENTIAL_ISSUER="did:web:17a1-2a00-4802-2c0-9295-59ff-6a60-b735-32ea.eu.ngrok.io:policy:policy:example:returnDID:1.0:evaluation"

nginx/localhost-key.pem

+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

nginx/localhost.crt

+-----BEGIN CERTIFICATE-----
+MIIERjCCAq6gAwIBAgIQEdwdrjwvQ9p4J5XgHJljZDANBgkqhkiG9w0BAQsFADCB
+hTEeMBwGA1UEChMVbWtjZXJ0IGRldmVsb3BtZW50IENBMS0wKwYDVQQLDCRsdWJl
+bkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkxNDAyBgNVBAMMK21rY2Vy
+dCBsdWJlbkBtYWMxNi5sb2NhbCAoTHl1YmVuIFBlbmtvdnNraSkwHhcNMjIwNjI4
+MTQzMjA4WhcNMjQwOTI4MTQzMjA4WjBYMScwJQYDVQQKEx5ta2NlcnQgZGV2ZWxv
+cG1lbnQgY2VydGlmaWNhdGUxLTArBgNVBAsMJGx1YmVuQG1hYzE2LmxvY2FsIChM
+eXViZW4gUGVua292c2tpKTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+AMjZZooIQwEEJJywbOjxfSfnsRNAfRuAOrxk+4ikYwUWq0myC8RfZkMA3OFIh+ab
+CMyYCthgScbE4ktQQR9veJu8qttp8W69p5TCK2es5uQKzrMD4ktIRB6w5edVOzVN
+WuT7/PGNvow0utgEMhego2WgutKNVfWhCsyef86nhxOFzxRQVr/3MDblvN05xIt9
+zPuX/SkzZpTIQ7UDLCSVjKsjqno0EDTF9rkPNdKdbX+47QFBRaz9fBkXYaNa84J0
+B6Uec0o8sKE2AtEkqL16b7wvE6bS/jOfDyKaWEMq69xo0u8wXGp8i8hz91zCC6lV
+85Kdu0Y2o33ENMKcmFe9Pi8CAwEAAaNeMFwwDgYDVR0PAQH/BAQDAgWgMBMGA1Ud
+JQQMMAoGCCsGAQUFBwMBMB8GA1UdIwQYMBaAFOuFVZoLYR9kklm7EHV8U2aI4a8J
+MBQGA1UdEQQNMAuCCWxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAYEAjVZvoB80
+Lz23QpL5Al6ep8FroAe5bBpwpp/XkEpartzDQ4HLUq5cAGACB7XCwFxWLidsS8VU
+QUIt8AH1kbkHBi7duVR+/xQ8JBw0u8t1Yh/rKKC8FKH4Tr/6XCxF3Z2FcFBJCNTV
+vtisis5V1MwoTUt2AwA/1tZ23EcmfFT6f5OdmCnJWAYGaS//V/0UKgy/u66R/k1R
+7gBaYphctgfXf1zGQ3K+8bXvpB+S6UMk65GqLpjjp4oKnHB8bbtb97fFlg+V/xRQ
+8SPtM8utNiXkRpT1DK9n7JfzWEnimIGwXSLHGUckNGsT5M6wIHNlsltnwwnCmIG5
+FvDqrWk8uccR2gAuxsLu2W4J/HxddV8T81+xW8z4pjFAsuXgypOPq7d6IVJDIkDK
+/vEbBKLehDn7pL/2hRgXrJs0LNjACu/EbPxT0PkasZ/qLHYw9luJ7TdkS/uxN3oS
+1aRl12IgTrkp/8CuFep5OzePKAYUdaNLdKCJDkIDisS4kb/S42kfcBEA
+-----END CERTIFICATE-----

nginx/localhost.key

+-----BEGIN PRIVATE KEY-----
+MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDI2WaKCEMBBCSc
+sGzo8X0n57ETQH0bgDq8ZPuIpGMFFqtJsgvEX2ZDANzhSIfmmwjMmArYYEnGxOJL
+UEEfb3ibvKrbafFuvaeUwitnrObkCs6zA+JLSEQesOXnVTs1TVrk+/zxjb6MNLrY
+BDIXoKNloLrSjVX1oQrMnn/Op4cThc8UUFa/9zA25bzdOcSLfcz7l/0pM2aUyEO1
+AywklYyrI6p6NBA0xfa5DzXSnW1/uO0BQUWs/XwZF2GjWvOCdAelHnNKPLChNgLR
+JKi9em+8LxOm0v4znw8imlhDKuvcaNLvMFxqfIvIc/dcwgupVfOSnbtGNqN9xDTC
+nJhXvT4vAgMBAAECggEBAMXKahNGnY1zogZ4K1ie8AyLOzNlT470kWMT4y0mDalm
+MJprbvEcrZ0QTXTBs6uiQ2EP3aZF9IF9RAi86NTnNpPPkUZwJ2VR+aUiLhJ0EBDE
+n9dk3MYcTZEXzeApbBxKqFdV3DuYxexWxSWTxCzGcgLT7QcKTnuM8xCciepdykSq
+wwLNZBi+gD77hWUdm9XlHG+4oQSyIxN1wBPwo90Q8bLONYAj/MDv9ilHEUEoINF2
+FLHrte9KLTOUEaBUHyQtOaVSRRtdWmsjV01olsGPv3br9NSoBOnszcsb2XyEqG1I
+kz8JfltKRII7KD+JCqLyTVlyvx+0zcVN7PEY85uxP5ECgYEA74PQU5hJLXE+YhhK
+tqS2TT+NIe7hcbsK1oBWk6hO/+CcvrWSftSAUk8I7csOQVg6q4pcAaFkFFQ2PmSo
+DGQU+iH6UET2W2FmtiVT7yMkLex3LBiPpKrWQolyc9/VjCR4EhutWnuT40YICU2o
+csXmzk2h20d4C4xkiW/N5U24SHcCgYEA1qxO6QbJTxhp5gy6qOXqL32y/k2Y4EcF
+Mi0XWGwSo9yggRjZEJ3j5qjHc87U3JYF0UHmd99xUy7z+WZVg/LaM0q6hURDLjAx
+uY0aOKwPyFHldz4+3oO8a6vBsMPrYwDKeDMNWlRjPyKJ2BTQkEjwhdZRywioRYhQ
+0kBkFRxRXgkCgYEAguq7vlWo+gvCG4BHplmVw9eO3xNhavbfz6tKp18B/17Yjm1U
+67pfgZ3ttXyeCB2fxA/WhpWezHXTSHtgV5WE2cwktCdduUkeCUWSAU5mAiwUX6f1
+K/6tKqVSR//7C6ULdGpocOLHTR0EW4F1J3cA15cbd24zMazFb1ILauD2b7UCgYEA
+zdDbwvyXqvacKUyQ9XehJDEemEPrSzOsHqQumr7azDGtzLf2/MB0DORKfZSSbn6D
+S1IkVU9rxjXhAX8EhAIlA0IlO7nrsu/P7LcEqcsFQqiKGN4bxpiE4LIGfKQKHJxY
+gg9oQO9hS9mgUQP7xim4OIj3WHKPakK8QigsDDVfKYkCgYAZaImpzZ4rAwf3T5a7
+EaMndSPwXQcXiuQoBzaKh+5GmvxnuUONoWBrAGFPxVBU8FjciOup25K/BfKcwqWt
+qTnmQkt+ZZmHIezzLR8/dvui9hNCGPGk1ft7hmcMkYjIIswFaFivG6INuKPKTkWj
+awngMUa2qk+j53AXCj5aRsfKaQ==
+-----END PRIVATE KEY-----

nginx/localhost.pem

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

nginx/nginx.conf

+events { }
+
+http {
+    # For paths with "-". No idea why it works.
+    server_names_hash_bucket_size 64;
+    client_max_body_size 64m;
+
+    server {
+        listen 8080 ssl;
+        ssl_certificate /etc/nginx/certs/localhost.crt;
+        ssl_certificate_key /etc/nginx/certs/localhost.key;
+
+        location /policy/policy/example/returnDID/1.0/evaluation/did.json {
+            proxy_pass http://policy:8080/policy/example/returnDID/1.0/evaluation;
+        }
+
+        location /policy/ {
+            proxy_pass http://policy:8080/;
+        }
+
+        location /cache/ {
+            proxy_pass http://cache:8080/;
+        }
+
+        location /task/ {
+            proxy_pass http://task:8080/;
+        }
+
+        location /signer/ {
+            proxy_pass http://signer:8080/;
+        }
+
+        location /infohub/ {
+            proxy_pass http://infohub:8080/;
+        }
+    }
+}