Face Power issue Data Center side

[gprao08]

@RNarmatha
Hi Narmatha Good Morning
We have a power issue at our SDC side so that our VM shut down and stopped our cQube application . Later we restarted the VM but identify nginx container service exited. Screen shot attached (by docker ps -a command) for your reference. Could you plz provide steps to restart all container services.

[RNarmatha]

Hi @rhwarrier- Could you please help with the next step to be taken here? 

[PavitraIR]

@gprao08
Nginx has been removed from the container. Please rebuild Nginx and verify all containers. please find the below command

1. cd cqube-devops/microservices/nginx-ms
2. sudo docker build -t nginx_ms:1 .
3. cd cqube-devops/ansible
4. sudo docker-compose -f docker-compose.yml up -d

If the container still shows as exited after rebuilding Nginx, follow the steps outlined below.

1. sudo docker stop nginx_app
2. sudo docker rm nginx_app
3. sudo docker rmi nginx_ms:1
4. cd cqube-devops/microservices/nginx-ms
5. sudo docker build -t nginx_ms:1 .
6. cd cqube-devops/ansible
7. sudo docker-compose -f docker-compose.yml up -d

[PavitraIR]

@gprao08 First check the certificate key and private.key and also check in default.old file whether ports are there or not, please find the below commands.

cd /opt
cd cqube
ls
cd nginix
ls
cat default.old

If any changes is needed means please modify it and save the file then restart the nginx container

sudo docker restart nginx_app

Note: If everything is correct then also it is not working means it is from your server routing issue .

[gprao08]

found no certificate key and certificate (.crt) file in the below path
cd /opt/cqube/nginx/cert/vsk.ap.gov.in
Screen shot attached.

Moreover there is only default.conf file and the consists the below data.

server {

    gzip on;
    gzip_types      application/javascript text/css;
    gzip_min_length 1000;
    gzip_static on;
    root /usr/share/nginx/html;
    server_tokens off;
    index index.html index.htm index.nginx-debian.html;

    add_header X-Frame-Options "SAMEORIGIN";
    add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload';
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";
    add_header Content-Security-Policy "https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css";
    add_header Referrer-Policy "strict-origin";
    add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host $host;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto https;
    #proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Accept-Encoding "";        

    server_name vsk.ap.gov.in;

    location /dashboard {
            proxy_pass http://172.17.0.1:4200;
            #client_max_body_size 2G;
            #try_files $uri $uri/ =404;
    }
    location /admin {
            proxy_pass http://172.17.0.1:4201;
            #client_max_body_size 2G;
            #try_files $uri $uri/ =404;
    }
    location /api {
            proxy_pass http://172.17.0.1:8000;
            client_max_body_size 10G;
            #try_files $uri $uri/ =404;
    }
    location /grafana {
            proxy_pass http://172.17.0.1:3005;
            proxy_set_header Host $http_host;
            proxy_http_version 1.1;
            #try_files $uri $uri/ =404;
    }
    location /auth {
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $host;
            proxy_pass http://172.17.0.1:8080$request_uri;
            proxy_set_header X-Forwarded-Proto https;
            proxy_set_header Accept-Encoding "";
    }
    location / {
            proxy_pass http://172.17.0.1:9000;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_connect_timeout 300;
            # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
            proxy_http_version 1.1;
            proxy_set_header Connection "";
            chunked_transfer_encoding off;
    }
    location /minio/ui/ {
            rewrite ^/minio/ui/(.*) /$1 break;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-NginX-Proxy true;
            # This is necessary to pass the correct IP to be hashed
            real_ip_header X-Real-IP;
            proxy_connect_timeout 300;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            chunked_transfer_encoding off;
            proxy_pass http://172.17.0.1:9001;

}

  listen [::]:443 ssl ipv6only=on;
  listen 443 ssl;
  ssl_certificate /etc/ssl_certificates/wildap1.crt;
  ssl_certificate_key /etc/ssl_certificates/star1.key;

}

server {
if ($host = vsk.ap.gov.in) {
return 301 https://$host$request_uri;
}

    listen       80;
    listen  [::]:80;        

    server_name vsk.ap.gov.in;
return 404;

}

[PavitraIR]

@gprao08 Use this below ssl template and add the url and crt and key. save it and restart the container.

https://docs.google.com/document/d/1jLL1777LIAMfNu-B5kvZWgyi-nmAeivRjGPCsWQaDC4/edit

[gprao08]

@PavitraIR
Plz provide the link access to [email protected]

[gprao08]

@PavitraIR
SSL template correct. But when I gave "sudo docker exec -it nginx_app bash"
It show the said docker stopped, I try to start the container it will not start. Screen shot attached for your reference.

[PavitraIR]

It's your server routing issue, please check with your devops team

…

On Sat, 18 May 2024, 12:00 gprao08, ***@***.***> wrote: @PavitraIR <https://github.com/PavitraIR> SSL template correct. But when I gave "*sudo docker exec -it nginx_app bash*" It show the said docker stopped, I try to srart the container it will not start. Screen shot attached for your reference. [image: Uploading image.png…] — Reply to this email directly, view it on GitHub <#870 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A2WE3GWGZVOKHZ2TMDN4TITZC3YPZAVCNFSM6AAAAABH3IO5OKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TINZWHE4TC> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[gprao08]

@PavitraIR @RNarmatha
We have no routing issue. We open the ports. Even though we are unable to access the application. Could you plz support..