added ssl encryption

docker-compose.yml

@@ -16,8 +16,9 @@ services:
             context: ./nginx
         volumes: 
           - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
+          - ./nginx/ssl:/etc/nginx/ssl
         ports:
-            - "8888:80"
+            - "8888:443"
         restart: unless-stopped
 
     db:

nginx/default.conf

@@ -1,10 +1,18 @@
 server {
+
+    listen       443 ssl;
+
+    ssl_certificate  /etc/nginx/ssl/server.crt;
+    ssl_certificate_key /etc/nginx/ssl/server.key;
+
     location / {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_http_version 1.1;
 
         proxy_pass http://nodejs:5000;
     }
+    
 }

nginx/ssl/server.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDaTCCAlECFCY6RW0Sav/MMhsISSCfRSmXYKGVMA0GCSqGSIb3DQEBCwUAMHEx
+CzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZGcmFuY2UxDjAMBgNVBAcMBUJsb2lzMRIw
+EAYDVQQKDAlSYXBwYXVyaW8xCzAJBgNVBAsMAlJBMSAwHgYJKoZIhvcNAQkBFhFj
+b250YWN0QGRhcmlvdy5mcjAeFw0yMzEwMDExODMxMDJaFw0yNDA5MzAxODMxMDJa
+MHExCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZGcmFuY2UxDjAMBgNVBAcMBUJsb2lz
+MRIwEAYDVQQKDAlSYXBwYXVyaW8xCzAJBgNVBAsMAlJBMSAwHgYJKoZIhvcNAQkB
+FhFjb250YWN0QGRhcmlvdy5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAMYG1CN9+yL5Mzra2YRuu+KqqBvAmYilNcQrdNlsd4K9uqzcLuQ1TPUgFUiA
+Y6KpGTMbwWot2icIGciDcEgB0ZYgJeK/mfr9TbRXVckYnUnTbAWmTZT62Eo7xj2T
+Byf6KZVG2rGcU3aMP5HvqXRXWXyx1UEbKfMBnH3pL+zIF0Y6Qlx4/2T1aF0schcu
+cpWnSkbfrtS6Z2MCEs0CBNFQDDckU1MbktzFhhErUO+tF/qH52/Gs5m7jo50wg3A
+MJIaTfLh89UYNq7j4NUGBT6qD8XbnsWsPRmylpGrgxa9vk2E14CIAlACEHCFfWOr
+H9/ZOBqtG2fGVJZW5mEGkqkyhh8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAua02
+lEZlEOTdh+vq8elADat/gX6hFAC9IUcjLWc7+nzC2WP9OISS786E3IEB606Eep5J
+KQgcRqMl7EcKIh1aTV/kVbiaghCp0flhFjRvZQkilampLhuTb3CoZXO0R5lazh9A
+wHdPt27TbtXh3LljCcFKV77gcvoAe27aU56Gk01e784/9A0/LDSpqGn4ArTs0hSp
+MA0MUmx4HedeLa53O32lNo7vlrgcEMUKKp/gee0vitZ+OozOdB3BpQOF0O9wxUqu
+KkSQOvZ+Vj4os3wlsLcU/XYz9vI3p6//Hn5coQzizLCQc1aewMK+SuiufYYcZFpI
++fhI50xmESj1JYQPNQ==
+-----END CERTIFICATE-----

nginx/ssl/server.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----