nginx/ssl

.gitignore

@@ -13,3 +13,4 @@ local_config.*
 .python-version
 *.vscode*
 whisper*
+*.pem

Dockerfile

@@ -4,7 +4,7 @@ FROM python:3.10-slim
 RUN export DEBIAN_FRONTEND=noninteractive \
     && apt-get -qq update \
     && apt-get -qq install --no-install-recommends \
-    ffmpeg gcc git supervisor
+    ffmpeg gcc git supervisor nginx
 
 # install python requirements
 RUN pip install -U pip setuptools
@@ -20,5 +20,6 @@ COPY airports.dat acro.json __init__.py pythabot.py pywx.py transcribe_alerts.py
 # setup supervisord
 RUN mkdir -p /var/log/supervisor
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+COPY nginx.conf /etc/nginx/sites-available/default
 
 CMD ["/usr/bin/supervisord"]

nginx.conf

@@ -0,0 +1,10 @@
+server {
+    listen 443 ssl;
+    ssl_certificate /data/fullchain.pem;
+    ssl_certificate_key /data/privkey.pem;
+    server_name example.com;
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+}

supervisord.conf

@@ -10,7 +10,15 @@ stdout_logfile_maxbytes=0
 redirect_stderr=true
 
 [program:waitress]
-command=waitress-serve webscanner:app
+command=waitress-serve --url-scheme=https webscanner:app
+stdout_logfile=/dev/fd/1
+stdout_logfile_maxbytes=0
+redirect_stderr=true
+
+[program:nginx]
+command=/usr/sbin/nginx -g "daemon off;"
+autostart=true
+autorestart=unexpected
 stdout_logfile=/dev/fd/1
 stdout_logfile_maxbytes=0
 redirect_stderr=true

webscanner.py

@@ -89,7 +89,3 @@ def list():
     reply = template.render({'events': events})
 
     return reply
-
-
-if __name__ == '__main__':
-    print(list())