hyungi/tk-factory-services
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(infra): nginx 동적 DNS resolve + Docker 헬스체크 추가

Browse Source 
컨테이너 재생성 시 502 Bad Gateway 방지:
- 모든 nginx proxy_pass를 set $upstream 변수 방식으로 전환 (9개 파일, 24개 location)
- resolver 127.0.0.11 valid=10s ipv6=off 통합 선언
- ai-api location의 개별 resolver 8.8.8.8 제거 (server-level로 통합)
- 10개 API 서비스에 healthcheck 추가 (Node: wget, Python: urllib)
- 모든 web/gateway depends_on을 condition: service_healthy로 강화

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hyungi Ahn
2026-03-23 12:53:34 +09:00
parent 2afcc4448b
commit 3d314c1fb4
10 changed files with 139 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
system2-report/web/nginx.conf
View File

@@ -1,6 +1,7 @@
server {
listen 80;
server_name _;
resolver 127.0.0.11 valid=10s ipv6=off;
root /usr/share/nginx/html;
index pages/safety/issue-report.html;
@@ -26,7 +27,8 @@ server {
# System 1 API 프록시 (공장/작업장, TBM, 출입관리, 프로젝트)
location /api/workplaces/ {
proxy_pass http://system1-api:3005;
set $upstream http://system1-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -34,7 +36,8 @@ server {
}
location /api/projects/ {
proxy_pass http://system1-api:3005;
set $upstream http://system1-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -42,7 +45,8 @@ server {
}
location /api/tbm/ {
proxy_pass http://system1-api:3005;
set $upstream http://system1-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -50,7 +54,8 @@ server {
}
location /api/workplace-visits/ {
proxy_pass http://system1-api:3005;
set $upstream http://system1-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -59,7 +64,6 @@ server {
# AI Service 프록시 (맥미니 home-service-proxy 경유)
location /ai-api/ {
resolver 8.8.8.8 valid=300s ipv6=off;
set $ai_upstream https://ai.hyungi.net;
rewrite ^/ai-api/(.*) /api/ai/$1 break;
proxy_pass $ai_upstream;
@@ -75,7 +79,8 @@ server {
# System 2 API 프록시 (신고 관련)
location /api/ {
proxy_pass http://system2-api:3005;
set $upstream http://system2-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -84,7 +89,8 @@ server {
# System 2 uploads (신고 사진 등)
location ^~ /uploads/issues/ {
proxy_pass http://system2-api:3005/uploads/issues/;
set $upstream http://system2-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -93,7 +99,8 @@ server {
# System 1 uploads 프록시 (작업장 레이아웃 이미지 등)
location ^~ /uploads/ {
proxy_pass http://system1-api:3005/uploads/;
set $upstream http://system1-api:3005;
proxy_pass $upstream$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;