Update docker-compose and nginx configuration for improved environment setup and SSL support

Author: locmaymo

docker-compose.yaml

@@ -9,16 +9,14 @@ services:
     volumes:
       - app_code:/var/www/html
       - ./.env:/var/www/html/.env
+    env_file:
+      - .env
     environment:
-      APP_ENV: production
-      DB_CONNECTION: mysql
       DB_HOST: mysql
-      DB_PORT: 3306
-      DB_DATABASE: tim
-      DB_USERNAME: root
-      DB_PASSWORD: root
+      REDIS_HOST: redis
     depends_on:
       - mysql
+      - redis
     networks:
       - tim
 
@@ -27,8 +25,8 @@ services:
     container_name: mysql
     restart: unless-stopped
     environment:
-      MYSQL_ROOT_PASSWORD: root
-      MYSQL_DATABASE: tim
+      MYSQL_ROOT_PASSWORD: ${DB_PASSWORD}
+      MYSQL_DATABASE: ${DB_DATABASE}
     volumes:
       - dbdata:/var/lib/mysql
       - ./laravel.sql:/docker-entrypoint-initdb.d/laravel.sql
@@ -44,9 +42,11 @@ services:
     restart: unless-stopped
     ports:
       - "80:80"
+      - "443:443"
     volumes:
       - app_code:/var/www/html:ro
       - ./nginx.conf:/etc/nginx/conf.d/default.conf
+      - /etc/ssl:/etc/ssl
     depends_on:
       - app
     networks:

nginx.conf

@@ -18,4 +18,45 @@ server {
         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
         fastcgi_param PATH_INFO $fastcgi_path_info;
     }
-}
+}
+
+server {
+    listen 443 ssl;
+    server_name tim.phamloc.top;
+
+    # SSL Configuration
+    ssl_certificate /etc/ssl/certs/cloudflare.pem;
+    ssl_certificate_key /etc/ssl/private/cloudflare.key;
+    ssl_client_certificate /etc/ssl/certs/cloudflare.crt;
+    ssl_verify_client on;
+
+    # SSL Settings
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+    ssl_prefer_server_ciphers on;
+
+    # Client Upload Size
+    client_max_body_size 100M;
+
+    # timeout configurations
+    proxy_connect_timeout       300;
+    proxy_send_timeout          300;
+    proxy_read_timeout          300;
+    send_timeout                300;
+
+
+    location / {
+        proxy_pass http://app:9000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+
+        # Cho phép giữ kết nối lâu hơn
+        proxy_buffering off;
+    }
+}