Use openresty

.gitignore

@@ -1,3 +1,3 @@
 strfry/db/*
-nginx/letsencrypt
+openresty/letsencrypt
 

docker-compose.yml

@@ -1,16 +1,15 @@
 version: '3'
 
 services:
-  nginx:
-    build: ./nginx
+  openresty:
+    image: openresty/openresty:1.21.4.3-1-jammy
     ports:
       - '80:80'
       - '443:443'
     volumes:
-      - ./nginx/nginx.default.conf:/etc/nginx/conf.d/default.conf
-      - ./nginx/nginx.conf:/etc/nginx/nginx.conf
-      - ./html:/var/www/html
-      - ./nginx/letsencrypt:/etc/letsencrypt
+      - ./openresty/nginx.default.conf:/etc/nginx/conf.d/default.conf
+      - ./html:/usr/local/openresty/nginx/html
+      - ./openresty/letsencrypt:/etc/letsencrypt
     depends_on:
       - strfry
 
@@ -20,3 +19,10 @@ services:
       - ./strfry/config/strfry.conf:/etc/strfry.conf
       - ./strfry/db:/app/strfry-db
       - ./strfry/plugins:/app/plugins
+  certbot:
+    image: certbot/certbot
+    container_name: certbot
+    volumes:
+      - ./openresty/letsencrypt:/etc/letsencrypt
+      - ./html:/usr/local/openresty/nginx/html
+    command: certonly --webroot -w /usr/local/openresty/nginx/html --force-renewal --email [email protected] -d relay.nos.social --agree-tos

html/relay_home/index.html

@@ -112,7 +112,7 @@ <h1 class="display-1 text-center">nos relay</h1>
             </p>
           </div>
           <div class="image-content">
-            <img src="/example.png" alt="Mobile App Screenshot">
+            <img src="/screenshot.png" alt="Mobile App Screenshot">
           </div>
         </div>
       </div>

nginx/nginx.default.conf → openresty/nginx.default.conf

@@ -1,6 +1,21 @@
+root /usr/local/openresty/nginx/html;
+
+resolver 8.8.8.8;
+
+# We redirect to stdout and stderr to get everything in docker logs
+access_log /dev/stdout;
+error_log /dev/stderr;
+
+# use_proxy is a variable we use to determine whether or not to send the
+# request to the nostr relay
+map $http_upgrade$http_accept $use_proxy {
+    default 0;
+    ~*websocket 1;
+    "~*application/nostr\+json" 1;
+}
+
 server {
     server_name host.docker.internal;
-    root /var/www/html;
 
     location / {
         error_page 418 = /relay_home$uri;
@@ -21,7 +36,10 @@ server {
     }
 
     location /relay_home {
-        try_files $uri $uri/ /index.html =404;
+        #try_files $uri $uri/ /index.html =404;
+        proxy_ssl_server_name on;
+        proxy_set_header Host nos-relay.webflow.io;
+        proxy_pass https://nos-relay.webflow.io$request_uri;
     }
 
     # An example lud16 config that just redirects users to the alby wallet, this
@@ -45,11 +63,6 @@ server {
     server_name relay.nos.social;
     listen 80;
 
-    # This will be needed once we enable cert autorenewal
-    location ^~ /.well-known/acme-challenge {
-        root /var/www/certbot;
-    }
-
     if ($host = relay.nos.social) {
         return 301 https://$host$request_uri;
     }