{"id":223,"date":"2023-05-25T23:32:37","date_gmt":"2023-05-25T15:32:37","guid":{"rendered":"https:\/\/gri.my\/blog\/?p=223"},"modified":"2023-07-13T01:36:05","modified_gmt":"2023-07-12T17:36:05","slug":"setting-up-magento-on-docker-with-nginx-as-reverse-proxy","status":"publish","type":"post","link":"https:\/\/gri.my\/blog\/setting-up-magento-on-docker-with-nginx-as-reverse-proxy\/","title":{"rendered":"Setting up Magento on docker (with nginx as reverse proxy)"},"content":{"rendered":"\n

Download Bitnami’s Magento docker image<\/h2>\n\n\n
\ncurl -sSL https:\/\/raw.githubusercontent.com\/bitnami\/containers\/main\/bitnami\/magento\/docker-compose.yml > docker-compose.yml\ndocker-compose up -d\n<\/pre><\/div>\n\n\n
You may want to change the external port within the yml file since it defaults to port 80 and 443. Here we use port 1234 for HTTP and 1235 for HTTPS.<\/p>\n\n\n
\nversion: '2'\nservices:\n  mariadb:\n    image: docker.io\/bitnami\/mariadb:10.4\n    environment:\n      # ALLOW_EMPTY_PASSWORD is recommended only for development.\n      - ALLOW_EMPTY_PASSWORD=yes\n      - MARIADB_USER=bn_magento\n      - MARIADB_DATABASE=bitnami_magento\n    volumes:\n      - 'mariadb_data:\/bitnami\/mariadb'\n  magento:\n    image: docker.io\/bitnami\/magento:2\n    ports:\n      - '1234:8080' # HTTP\n      - '1235:8443' # HTTPS\n    environment:\n      - MAGENTO_HOST=localhost\n      - MAGENTO_DATABASE_HOST=mariadb\n      - MAGENTO_DATABASE_PORT_NUMBER=3306\n      - MAGENTO_DATABASE_USER=bn_magento\n      - MAGENTO_DATABASE_NAME=bitnami_magento\n      - ELASTICSEARCH_HOST=elasticsearch\n      - ELASTICSEARCH_PORT_NUMBER=9200\n      # ALLOW_EMPTY_PASSWORD is recommended only for development.\n      - ALLOW_EMPTY_PASSWORD=yes\n    volumes:\n      - 'magento_data:\/bitnami\/magento'\n    depends_on:\n      - mariadb\n      - elasticsearch\n  elasticsearch:\n    image: docker.io\/bitnami\/elasticsearch:7\n    volumes:\n      - 'elasticsearch_data:\/bitnami\/elasticsearch\/data'\nvolumes:\n  mariadb_data:\n    driver: local\n  magento_data:\n    driver: local\n  elasticsearch_data:\n    driver: local\n<\/pre><\/div>\n\n\n
Configure nginx<\/h2>\n\n\n\n
Sample nginx.conf that configures nginx to be a reverse proxy for docker with SSL certs from LetsEncrypt.<\/p>\n\n\n
\nhttp {\n\tserver {\n\t\tlisten       443 ssl;\n\t\tlisten [::]:443 ssl;\n\t\tserver_name  yourdomain.com;\n\n\t\tssl_certificate      "C:\\Certbot\\live\\yourdomain.com\\fullchain.pem";\n\t\tssl_certificate_key  "C:\\Certbot\\live\\yourdomain.com\\privkey.pem";\n\n\t\tssl_session_cache    shared:SSL:1m;\n\t\tssl_session_timeout  5m;\n\n\t\tssl_ciphers  HIGH:!aNULL:!MD5;\n\t\tssl_prefer_server_ciphers  on;\n\n\t\tlocation \/ {\n\n\t\t\tproxy_pass         https:\/\/localhost:1235;\n\t\t\tproxy_set_header    Host               yourdomain.com;\n\n\t\t\tproxy_buffer_size          128k;\n\t\t\tproxy_buffers              4 256k;\n\t\t\tproxy_busy_buffers_size    256k;\n\t\t}\n\t}\n}\n<\/pre><\/div>\n\n\n
Remember to restart nginx for settings to apply<\/p>\n\n\n\n
Configure Magento<\/h2>\n\n\n\n
Configure hostname<\/h4>\n\n\n\n
Within Docker Desktop, go to Containers and click on the Magento container. In the container’s terminal, enter these to set the hostname. <\/p>\n\n\n
\nmagento setup:store-config:set --base-url="http:\/\/yourdomain.com\/"\nmagento setup:store-config:set --base-url-secure="https:\/\/yourdomain.com\/"\n<\/pre><\/div>\n\n\n
You need to do this because Magento uses full URLs for links within their pages, which breaks if you use the default localhost value.<\/p>\n\n\n\n
Enable HTTPS for the admin panel<\/h4>\n\n\n\n
Within Docker Desktop, go to Containers and click on the mariadb container. In the container’s terminal..<\/p>\n\n\n
\nmysql -u bn_magento -p bitnami_magento\n<\/pre><\/div>\n\n\n
Press enter when prompted for password<\/p>\n\n\n
\nupdate core_config_data set value = 1 where path = 'web\/secure\/use_in_adminhtml';\n<\/pre><\/div>\n\n\n
Restart the Magento container<\/p>\n\n\n\n
Make PHP tmp folder writeable<\/h4>\n\n\n\n
Within Docker Desktop, go to Containers and click on the Magento container. In the container’s terminal..<\/p>\n\n\n
\nchmod 777 \/opt\/bitnami\/php\/tmp\n<\/pre><\/div>\n\n\n
This is so that you can upload media via the REST API without error.<\/p>\n\n\n\n
Allow encoded slashes for Apache<\/h4>\n\n\n\n
Go to the Magento container and edit the file \/opt\/bitnami\/apache\/conf\/vhosts\/magento-https-vhost.conf<\/code><\/p>\n\n\n\n
Add a line AllowEncodedSlashes NoDecode<\/code> to the virtual host like so<\/p>\n\n\n
\n&lt;VirtualHost 127.0.0.1:8443 _default_:8443>\n  ServerName www.example.com\n  ServerAlias *\n  SSLEngine on\n  SSLCertificateFile "\/opt\/bitnami\/apache\/conf\/bitnami\/certs\/server.crt"\n  SSLCertificateKeyFile "\/opt\/bitnami\/apache\/conf\/bitnami\/certs\/server.key"\n  DocumentRoot \/opt\/bitnami\/magento\n  AllowEncodedSlashes NoDecode\n  &lt;Directory "\/opt\/bitnami\/magento">\n    Options -Indexes +FollowSymLinks -MultiViews\n    AllowOverride All\n    Require all granted\n  &lt;\/Directory>\n&lt;\/VirtualHost>\n<\/pre><\/div>\n\n\n
This is to let the API passthrough paths that has the slash encoded in it. See Github issue<\/a>.<\/p>\n\n\n\n
Then run<\/p>\n\n\n
\napachectl restart\n<\/pre><\/div>\n\n\n
to apply the directive.<\/p>\n","protected":false},"excerpt":{"rendered":"
Download Bitnami’s Magento docker image You may want to change the external port within the yml file since it defaults to port 80 and 443. Here we use port 1234 for HTTP and 1235 for…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-223","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/posts\/223","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/comments?post=223"}],"version-history":[{"count":14,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/posts\/223\/revisions"}],"predecessor-version":[{"id":244,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/posts\/223\/revisions\/244"}],"wp:attachment":[{"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/media?parent=223"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/categories?post=223"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gri.my\/blog\/wp-json\/wp\/v2\/tags?post=223"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}