{"id":96,"date":"2018-03-09T20:10:07","date_gmt":"2018-03-09T20:10:07","guid":{"rendered":"http:\/\/tonysbit.blog\/?p=96"},"modified":"2018-03-09T20:10:07","modified_gmt":"2018-03-09T20:10:07","slug":"deploying-a-ssl-protected-containerized-app-using-nginx-reverse-proxy-part-1","status":"publish","type":"post","link":"https:\/\/tonysbit.blog\/?p=96","title":{"rendered":"Deploying a SSL Protected Containerized App: Part 1"},"content":{"rendered":"<h1>Motivation<\/h1>\n<p>One of the greatest motivations for me is seeing the current open-source projects. It is amazing to be apart of a community that truly transcends race, age, gender, education that culminates in the development of society changing technologies, it is not difficult to be optimistic about the future.<\/p>\n<p>With that, lets deploy a containerized application behind a Nginx Reverse Proxy with a free SSL encrypted. This entire deployment will only cost you a domain.<\/p>\n<h1>Technologies Used<\/h1>\n<p>The technologies used in this series are:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.docker.com\/\">Docker<\/a><\/li>\n<li><a href=\"https:\/\/www.nginx.com\/\">Nginx<\/a><\/li>\n<li><a href=\"https:\/\/azure.microsoft.com\/en-us\/?v=18.07a\">Azure<\/a><\/li>\n<li><a href=\"https:\/\/github.com\/jwilder\/nginx-proxy\">Nginx-Proxy<\/a><\/li>\n<\/ul>\n<h1>Architecture<\/h1>\n<figure id=\"attachment_127\" aria-describedby=\"caption-attachment-127\" style=\"width: 541px\" class=\"wp-caption aligncenter\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\" size-full wp-image-127 aligncenter\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/architecture.png?resize=541%2C317\" alt=\"Architecture\" width=\"541\" height=\"317\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/architecture.png?w=541&amp;ssl=1 541w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/architecture.png?resize=300%2C176&amp;ssl=1 300w\" sizes=\"auto, (max-width: 541px) 100vw, 541px\" \/><figcaption id=\"caption-attachment-127\" class=\"wp-caption-text\">Figure 1: Application Architecture<\/figcaption><\/figure>\n<h1>Getting Started<\/h1>\n<p>To start, I would advise signing up to a <a href=\"https:\/\/azure.microsoft.com\/en-us\/free\/\">Azure trial\u00a0<\/a>. This will help you get started without any hassle.<\/p>\n<p>If you have your own hosted VM or are doing a locally hosted docker stack please feel free to skip this part and move onto part 2.<\/p>\n<h2>Deploying the Virtual Machine<\/h2>\n<h3>Select the image<\/h3>\n<figure id=\"attachment_97\" aria-describedby=\"caption-attachment-97\" style=\"width: 775px\" class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-97\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/7a2fa0cb-4a88-4865-a39a-60c6dfbe9374.png?resize=640%2C249\" alt=\"7a2fa0cb-4a88-4865-a39a-60c6dfbe9374\" width=\"640\" height=\"249\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/7a2fa0cb-4a88-4865-a39a-60c6dfbe9374.png?w=1149&amp;ssl=1 1149w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/7a2fa0cb-4a88-4865-a39a-60c6dfbe9374.png?resize=300%2C116&amp;ssl=1 300w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/7a2fa0cb-4a88-4865-a39a-60c6dfbe9374.png?resize=768%2C298&amp;ssl=1 768w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-97\" class=\"wp-caption-text\">Figure 2: Selecting a VM<\/figcaption><\/figure>\n<ol>\n<li>In the side menu press Virtual Machines<\/li>\n<li>Press &#8220;Add&#8221;<\/li>\n<li>Select the &#8220;CentOS-based 7.4&#8221; image<\/li>\n<li>Press &#8220;Ok&#8221;<\/li>\n<\/ol>\n<p><strong>Note: Technically you can use any image that can run docker.\u00a0<\/strong><\/p>\n<h3>Configure the machine<\/h3>\n<figure id=\"attachment_99\" aria-describedby=\"caption-attachment-99\" style=\"width: 409px\" class=\"wp-caption aligncenter\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"  wp-image-99 aligncenter\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/c63e836c-f4d2-4114-88e4-b937b5f1310b.png?resize=409%2C565\" alt=\"c63e836c-f4d2-4114-88e4-b937b5f1310b\" width=\"409\" height=\"565\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/c63e836c-f4d2-4114-88e4-b937b5f1310b.png?w=662&amp;ssl=1 662w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/c63e836c-f4d2-4114-88e4-b937b5f1310b.png?resize=217%2C300&amp;ssl=1 217w\" sizes=\"auto, (max-width: 409px) 100vw, 409px\" \/><figcaption id=\"caption-attachment-99\" class=\"wp-caption-text\">Figure 3: Configuring basic settings<\/figcaption><\/figure>\n<ol>\n<li>\u00a0Name the VM &#8211; ie. DockerHost<\/li>\n<li>Change disk type to HDD (To save credit)<\/li>\n<li>Set the username<\/li>\n<li>Change authentication type to password for simplicity<\/li>\n<li>Set the password<\/li>\n<li>Confirm the password<\/li>\n<li>Create a new Resource Group (Such as SSLTest)<\/li>\n<\/ol>\n<h3>Select Machine Size<\/h3>\n<figure id=\"attachment_100\" aria-describedby=\"caption-attachment-100\" style=\"width: 300px\" class=\"wp-caption aligncenter\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\" size-medium wp-image-100 aligncenter\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/1ba8a01c-3318-4eba-9529-0a9343cd4ed8.png?w=300&#038;resize=300%2C252\" alt=\"1ba8a01c-3318-4eba-9529-0a9343cd4ed8\" width=\"300\" height=\"252\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/1ba8a01c-3318-4eba-9529-0a9343cd4ed8.png?w=1140&amp;ssl=1 1140w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/1ba8a01c-3318-4eba-9529-0a9343cd4ed8.png?resize=300%2C252&amp;ssl=1 300w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/1ba8a01c-3318-4eba-9529-0a9343cd4ed8.png?resize=1024%2C861&amp;ssl=1 1024w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/1ba8a01c-3318-4eba-9529-0a9343cd4ed8.png?resize=768%2C645&amp;ssl=1 768w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><figcaption id=\"caption-attachment-100\" class=\"wp-caption-text\">Figure 4: Selecting a VM Size<\/figcaption><\/figure>\n<ol>\n<li>Select a machine size, I chose the D4S_V3 (4 vCPUs, 16GB) however any image with 2 or more vCPUs and more than 8GB of RAM is sufficient.<\/li>\n<\/ol>\n<h3>Virtual Machine Settings<\/h3>\n<figure id=\"attachment_101\" aria-describedby=\"caption-attachment-101\" style=\"width: 209px\" class=\"wp-caption aligncenter\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\" size-medium wp-image-101 aligncenter\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/62822944-ec41-46da-ba53-b3364a9c1d30.png?w=209&#038;resize=209%2C300\" alt=\"62822944-ec41-46da-ba53-b3364a9c1d30\" width=\"209\" height=\"300\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/62822944-ec41-46da-ba53-b3364a9c1d30.png?w=642&amp;ssl=1 642w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/62822944-ec41-46da-ba53-b3364a9c1d30.png?resize=209%2C300&amp;ssl=1 209w\" sizes=\"auto, (max-width: 209px) 100vw, 209px\" \/><figcaption id=\"caption-attachment-101\" class=\"wp-caption-text\">Figure 5: Configuring VM settings<\/figcaption><\/figure>\n<p>You can leave default settings for the settings. (I switched off auto-shutdown).<\/p>\n<p><strong>Note: Make sure public IP address has been enabled<\/strong><\/p>\n<p>Wait for the Virtual Machine to finishing deploying&#8230;<\/p>\n<h2>Configuring DNS<\/h2>\n<h3>Find the public IP address<\/h3>\n<p>After the machine has been successfully configured, browse to the virtual machine in Azure and get the public IP.<\/p>\n<figure id=\"attachment_102\" aria-describedby=\"caption-attachment-102\" style=\"width: 1192px\" class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-102\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/6b2dfa60-0041-4e1c-9832-49086c21e3a6.png?resize=640%2C344\" alt=\"6b2dfa60-0041-4e1c-9832-49086c21e3a6\" width=\"640\" height=\"344\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/6b2dfa60-0041-4e1c-9832-49086c21e3a6.png?w=1192&amp;ssl=1 1192w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/6b2dfa60-0041-4e1c-9832-49086c21e3a6.png?resize=300%2C161&amp;ssl=1 300w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/6b2dfa60-0041-4e1c-9832-49086c21e3a6.png?resize=1024%2C551&amp;ssl=1 1024w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/6b2dfa60-0041-4e1c-9832-49086c21e3a6.png?resize=768%2C413&amp;ssl=1 768w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-102\" class=\"wp-caption-text\">Figure 6: Identifying the public IP<\/figcaption><\/figure>\n<h3>Create the TXT file<\/h3>\n<p>Log onto your domain provide (i.e. godaddy.com) and create a TXT file to point your domain address to the newly created VM.<\/p>\n<figure id=\"attachment_103\" aria-describedby=\"caption-attachment-103\" style=\"width: 1104px\" class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-103\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/10244f5f-420d-4cc5-9dc3-316de37cd1f8.png?resize=640%2C182\" alt=\"10244f5f-420d-4cc5-9dc3-316de37cd1f8\" width=\"640\" height=\"182\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/10244f5f-420d-4cc5-9dc3-316de37cd1f8.png?w=1104&amp;ssl=1 1104w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/10244f5f-420d-4cc5-9dc3-316de37cd1f8.png?resize=300%2C85&amp;ssl=1 300w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/10244f5f-420d-4cc5-9dc3-316de37cd1f8.png?resize=1024%2C291&amp;ssl=1 1024w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/10244f5f-420d-4cc5-9dc3-316de37cd1f8.png?resize=768%2C218&amp;ssl=1 768w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-103\" class=\"wp-caption-text\">Figure 7: Creating a TXT record<\/figcaption><\/figure>\n<p>Do a simple &#8220;<code>nslookup<\/code>\u00a0\u200b\u200b&lt;domain&gt;&#8221; till you can confirm that the domain has been updated.<\/p>\n<h2>Opening up ports 443, 80, 22<\/h2>\n<figure id=\"attachment_104\" aria-describedby=\"caption-attachment-104\" style=\"width: 1385px\" class=\"wp-caption alignnone\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-104\" src=\"https:\/\/tonysbit.files.wordpress.com\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?resize=640%2C262\" alt=\"5bd74363-8f8c-45de-8305-3c3c885cdada\" width=\"640\" height=\"262\" srcset=\"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?w=1385&amp;ssl=1 1385w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?resize=300%2C123&amp;ssl=1 300w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?resize=1024%2C418&amp;ssl=1 1024w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?resize=768%2C314&amp;ssl=1 768w, https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/5bd74363-8f8c-45de-8305-3c3c885cdada.png?w=1280&amp;ssl=1 1280w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-104\" class=\"wp-caption-text\">Figure 8: Editing network interfaces<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Browse to the virtual machine and browse to &#8220;Networking&#8221; in Azure. The following ports need to be allowed for inbound traffic<\/p>\n<p>443 &#8211; This will be used to receive the SSL protected HTTPS requests<\/p>\n<p>80 &#8211; This will be used temporarily to recieve your SSL certificate<\/p>\n<p>22 &#8211; This should be open already however if it isn&#8217;t, allow 22 traffic for SSH connections.<\/p>\n<h2>SSH into the VM and allow root access (Dev only)<\/h2>\n<p>Using putty if you are on windows or just terminal on a Mac or Linux workstation, attempt to SSH into the machine.<\/p>\n<p>After successfully logging in (Using the specified credentials when creating the VM), enable the root user for ease of use for the purpose of this tutorial (Do not do this for production environments).<\/p>\n<p>This can be done by running<\/p>\n<p style=\"text-align:center;\"><strong><code>sudo passwd root<\/code><\/strong><\/p>\n<p>Specify the new root password<\/p>\n<p>Confirm the root password<\/p>\n<p><strong>Congratulations you have completed part 1 of this tutorial, now that you have a virtual machine ready, let move on to <a href=\"http:\/\/vfy.mne.mybluehost.me\/tonysbit\/2018\/03\/09\/deploying-a-ssl-protected-containerized-app-part-2\/\">part 2<\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Motivation One of the greatest motivations for me is seeing the current open-source projects. It is amazing to be apart of a community that truly transcends race, age, gender, education that culminates in the development of society changing technologies, it is not difficult to be optimistic about the future. With that, lets deploy a containerized [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":127,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3,6,10,13],"tags":[],"class_list":["post-96","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-docker","category-linux","category-software-development"],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/tonysbit.blog\/wp-content\/uploads\/2018\/03\/architecture.png?fit=541%2C317&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts\/96","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=96"}],"version-history":[{"count":0,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/posts\/96\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=\/wp\/v2\/media\/127"}],"wp:attachment":[{"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=96"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=96"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tonysbit.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=96"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}