Add nginx sidecar container
Closes #9 (closed)
Config files and SSL keys are now mounted on an external volume. The Nginx container runs without root privileges. Due to how Docker handles secrets and volumes (without swarm mode), we need a side container to adjust permissions on SSL keys/certs and config files so the Nginx container can read them.
Background on the use of an init container with Docker Compose and a non-root Nginx container: We avoid using Docker Compose secrets and Docker Compose deploy since they require swarm mode to properly set GID/UID:
For more context, refer to:
- https://github.com/docker/compose/issues/3270#issuecomment-1245819741
- https://github.com/docker/compose/issues/3270#issuecomment-206214034
- https://jtreminio.com/blog/running-docker-containers-as-current-host-user
- https://docs.docker.com/storage/bind-mounts/
- https://stackoverflow.com/questions/40462189/docker-compose-set-user-and-group-on-mounted-volume
- https://stackoverflow.com/questions/29245216/write-in-shared-volumes-docker/29251160#29251160