Enabling SSL connection for WISE-Docker-Dev

[lycosa9527]

Hello everyone, after a few struggling with this project, I finally get it running and able to access it through my domain.com.
However so far I still have trouble access it through HTTP connection.

Below is my docker-compose.yml file.

  wise-nginx:
    image: nginx:1.22
    container_name: wise-nginx
    depends_on:
      - wise-client
    ports:
      - '80:80'
      - '433:433'
    extra_hosts:
      - "atswise.top:127.0.0.1"
    volumes:
      - '${PWD}/nginx/conf.d:/etc/nginx/conf.d'

And below is my wise.conf

server {
    listen 80;
    listen 433 ssl;
    charset utf-8;
    access_log off;
    client_max_body_size 50M;
    server_name atswise.top www.atswise.top;
    ssl_certificate /etc/nginx/conf.d/cert.pem;
    ssl_certificate_key /etc/nginx/conf.d/cert.key;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_prefer_server_ciphers on;
    access_log /etc/nginx/conf.d/access.log;
    error_log /etc/nginx/conf.d/error.log;
    
    location /sockjs-node {
proxy_pass http://wise-client:4200;
proxy_set_header Host localhost:$server_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
 
    location /websocket {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /api {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location ~ /(student|teacher)/account/info {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /teacher/management {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /previewproject.html {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /portal {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /admin {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /author {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /studentuploads {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /projectIcons {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    location /curriculum {
proxy_pass http://wise-api:8080;
proxy_set_header Host localhost:$server_port;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    rewrite ^/wise5/(.*)$ /assets/wise5/$1 last;

    location / {
        proxy_pass http://wise-client:4200;
        proxy_set_header Host localhost:$server_port;
        proxy_set_header X-Forwarded-Host $server_name;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location /static {
        access_log   off;
        expires      30d;

        alias /app/static;
    }
}

the SSL certificate has been loaded without a issue, and I can use http fine, however when adding https infront of the domain, I get 503 error from Chrome. Can someone give me some pointers? Been working on this for 4 days already, checked most of the tutorials, added 433 ssl, and a few ssl_certificate commands, etc., must be missing something.

Thanks.😰😰😰

[hirokiterashima]

Hi again! I don't think we've tried using SSL with WISE-Docker-Dev. Are you trying to set up a server with Docker? This project (WISE-Docker-Dev) is intended to be used for developing WISE, so we don't recommend using it on a server, and definitely not for production. We started working on deploying with Docker containers a while back, but we paused the work for now to work on other projects. Would Docker deployment be of interest to you at some point?

For now, to deploy WISE on a server, we recommend building the artifacts (html, minified js files for wise-client and .war file for wise-api) and running dedicated Nginx, Tomcat, and MySQL services.

[hirokiterashima]

Closing this issue since it's been a while.

Just an additional update- we now support deploying WISE with Docker. If you want to take this route, you'll need to follow separate instructions for setting up your server here: https://github.com/WISE-Community/WISE-Docker-Server.