Nginx being parent container required for Traefik

templates/InvoiceNinja/0/README.md

@@ -20,4 +20,6 @@ You may need to "chmod -R 777 storage" in the "App" container.
 
 Google Maps:
 Get an API Key [Here](https://developers.google.com/maps/documentation/javascript/get-api-key) first.
-Then add GOOGLE_MAPS_API_KEY=<your key> in your .env file.
+Then add GOOGLE_MAPS_API_KEY=<your key> in your .env file.
+
+If using without HTTPS (like using the direct IP instead of through Traefik), please take out the line: "fastcgi_param HTTPS 1;" from your nginx.conf

templates/InvoiceNinja/0/Resources/nginx.conf

@@ -15,7 +15,7 @@ http {
 
     server {
         listen      80 default;
-        server_name your_ininja_site;
+        server_name _;
 
         root /var/www/app/public;
 
@@ -41,10 +41,11 @@ http {
             fastcgi_intercept_errors off;
             fastcgi_buffer_size 16k;
             fastcgi_buffers 4 16k;
+            fastcgi_param HTTPS 1;
         }
 
         location ~ /\.ht {
             deny all;
         }
     }
-}
+}

templates/InvoiceNinja/0/docker-compose.yml

@@ -10,7 +10,6 @@ services:
       {{- if (.Values.HOST_LABEL)}}
       io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
       {{- end}}
-      io.rancher.sidekicks: cron, web
     links:
       - mysql
     restart: on-failure
@@ -58,12 +57,12 @@ services:
       {{- if .Values.HOST_LABEL}}
       io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
       {{- end}}
+      traefik.enable: false
     restart: on-failure
     volumes:
       - /RancherCattleData/${DATA_DIR}/Database:/var/lib/mysql
   web:
     image: nginx
-    command: [nginx-debug, '-g', 'daemon off;']
     dns:
       - 1.1.1.1
       - 1.0.0.1
@@ -75,13 +74,16 @@ services:
       {{- if .Values.TRAEFIK_HOST}}
       traefik.enable: true
       traefik.frontend.rule: Host:${TRAEFIK_HOST}
-      traefik.port: "80"
       traefik.frontend.entryPoints: http,https
+      traefik.frontend.headers.forceSTSHeader: true
       traefik.frontend.headers.SSLRedirect: true
-      traefik.frontend.passHostHeader: true
+      traefik.frontend.headers.STSPreload: true
+      traefik.frontend.headers.STSSeconds: 15552000
+      traefik.port: "80"
       {{- else}}
       traefik.enable: false
       {{- end}}
+      io.rancher.sidekicks: app,cron
     links:
       - app
     networks: