如何在两个容器之间通信：nginx和nodejs

Question

我很难弄清楚如何从 nginx 容器代理传递到nodejs容器。

在我看来， http://localhost:3000 会落入 nginx 容器中......所以我认为这个设置是有意义的：

nginx 容器：

podman run -d \
            --name nginx.main \
            -p 0.0.0.0:8081:8080 \
            -p 0.0.0.0:4431:4430 \
            -p 0.0.0.0:3001:3000 \
            -u root \
            -v /home/_secrets/certbot/_certs:/etc/nginx/_cert \
            -v /home/mee/_volumes/nginx_main:/etc/nginx \
            nginx

nodejs 容器：

podman run -d \
            -v /home/mee/dev/abd/:/usr/src/app -w /usr/src/app \
            -p 3000:3000 \
            --name next.dev node:latest \
            npm run dev

firewalld，从 3001 路由到3000：

sudo firewall-cmd --add-port=3000/tcp --permanent
sudo firewall-cmd --add-port=3001/tcp --permanent
sudo firewall-cmd --permanent \
   --zone=mee_fd \
   --add-forward-port=port=3001:proto=tcp:toport=3000
sudo firewall-cmd --reload

nginx 配置：

location / {
                proxy_pass http://localhost:3000;
                add_header X-Frame-Options "SAMEORIGIN" always;
                add_header X-XSS-Protection "1; mode=block" always;
                add_header X-Content-Type-Options "nosniff" always;
                add_header Referrer-Policy "no-referrer-when-downgrade" always;
                add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
                # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
                # enable strict transport security only if you understand the implications
        }

真的不确定这应该如何通信...我尝试使用 ipaddress 而不是“localhost”，但我得到同样的反应。

谢谢

Answer 1

为了允许容器之间的通信，您需要设置共享网络，例如在 .yaml 中（这可以在 ci 上完成，仅出于代码目的而在 .yaml 中报告）：

version: '2'
services:
proxy:
build: ./
networks:
- example1
- example2
ports:
- 80:80
- 443:443

networks:
example1:
external:
name: example1_default
example2:
external:
name: example2_default

然后在您的 nginx 配置中：

location / {
                proxy_pass http://myServiceName:3000; <-- note is not localhost but the name of node service
                add_header X-Frame-Options "SAMEORIGIN" always;
                add_header X-XSS-Protection "1; mode=block" always;
                add_header X-Content-Type-Options "nosniff" always;
                add_header Referrer-Policy "no-referrer-when-downgrade" always;
                add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
                # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
                # enable strict transport security only if you understand the implications
        }

让我知道