Feature/docker ssl network - #27
Open
Louwrensth wants to merge 25 commits into
Open
Conversation
Rely on sensible default behavior provided by nginx's docker image.
Louwrensth
force-pushed
the
feature/docker-ssl-network
branch
from
July 6, 2026 02:54
fccf89a to
6c81174
Compare
remove DASHBOARD_PORT from container environment
Louwrensth
force-pushed
the
feature/docker-ssl-network
branch
from
July 6, 2026 03:19
6c81174 to
a5029c1
Compare
and make install targets.
Contributor
Author
Update image for systemdThe service is using an Note that we only review these lines: Restart serviceOptionally, if the service file was modified (not the case now but still doesn't hurt), reload systemd: Restart the systemd service: |
olivhoenen
marked this pull request as ready for review
August 10, 2026 14:45
olivhoenen
requested review from
SimonPinches,
olivhoenen and
prasad-sawantdesai
as code owners
August 10, 2026 14:45
Louwrensth
force-pushed
the
feature/docker-ssl-network
branch
from
August 13, 2026 22:22
bb9be9c to
81bd9eb
Compare
olivhoenen
approved these changes
Aug 14, 2026
olivhoenen
self-requested a review
August 14, 2026 16:02
gzip compressed the index-<hash>.js from 5.6 -> 1.7 MB. caching public, immutable makes the browser not GET it again. surprisingly, not using gzip_static also voids caching behavior of browser.
Contributor
Author
|
Wow, bef7350 made a big impact. Before, browsers were downloading the same 5.6MB |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PR Summary: feature/docker-ssl-network
nginx config modularization (3839d8d, b210f03, 50ca09b, 9569da3, a5029c1, 81bd9eb) — Split monolithic nginx config into reusable template snippets with runtime server-config selection.
HTTPS/SSL support (9569da3, 5b86009, 1286eb4, 04e0ceb, a5029c1) — Added compose override, HTTPS server block with TLS hardening, and HTTP→HTTPS redirect.
Self-signed certificate generation (b512dc5, 0f79db5) — Script for generating test TLS certificates with proper X.509 v3 SAN extensions.
Systemd service integration (92dc37b, 2bb577c, dbc3636, 552ba23) — Docker Compose-based systemd unit replacing old gunicorn-based service, with security hardening and environment file configuration.
Makefile overhaul (1286eb4, 552ba23, 5ef4b92) — Expanded Makefile with
USE_HTTPS=1toggle, comprehensive systemd targets, and dual-stack compose handling.Dockerfile restructuring (a5029c1, 81bd9eb) — Switched from single-file config to directory-level template, entrypoint, and SSL copies; port 443 exposed.
Docker Compose base updates (a5029c1) — Added container naming and whole-directory template mounts.
Ignore file maintenance (e305deb) — Updated
.dockerignoreand.gitignorefor SSL certs, dev artifacts, and env files.Documentation (7991af1) — Expanded installation docs with HTTPS workflow, systemd guides, and env var reference.
Repository housekeeping (cf1b8ba, 5715458) — Renamed CI workflow, updated CODEOWNERS.