letsencrypt new try...

.gitignore

@@ -2,4 +2,5 @@ bundle.js
 *.map
 *.css.map
 src/**/*.css
-node_modules
+node_modules
\ No newline at end of file
+/data/certbot
\ No newline at end of file

Dockerfile

@@ -10,4 +10,4 @@ WORKDIR /usr/share/nginx/html
 
 COPY . .
 
-RUN cp nginx.conf /etc/nginx/nginx.conf
+# RUN cp nginx.conf /etc/nginx/nginx.conf
\ No newline at end of file

data/nginx/app.conf

+server {
+    listen 80;
+
+    root   /usr/share/nginx/html;
+    index  index.html index.htm;
+
+    server_name kuadrado-software.fr www.kuadrado-software.fr;
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+
+    root   /usr/share/nginx/html;
+    index  index.html index.htm;
+    
+    server_name kuadrado-software.fr www.kuadrado-software.fr;
+    server_tokens off;
+
+    ssl_certificate /etc/letsencrypt/live/kuadrado-software.fr/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/kuadrado-software.fr/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    location / {
+        proxy_pass  http://kuadrado-software.fr;
+        proxy_set_header    Host                $http_host;
+        proxy_set_header    X-Real-IP           $remote_addr;
+        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
+    }
+}

docker-compose.yml

 version: "3.9"
 services:
     web:
-        build: .
         container_name: "kuadrado"
+        build: .
+        restart: unless-stopped
         ports:
             - "80:80"
             - "443:443"
         volumes:
             - ./public:/usr/share/nginx/html
+            - ./data/nginx:/etc/nginx/conf.d
             - ./data/certbot/conf:/etc/letsencrypt
             - ./data/certbot/www:/var/www/certbot
-        command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"
+        command: '/bin/sh -c ''while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g "daemon off;"'''
     certbot:
         image: certbot/certbot
+        restart: unless-stopped
         volumes:
-            - ./data/certbot/conf:/etc/letsencrypt
-            - ./data/certbot/www:/var/www/certbot
+        - ./data/certbot/conf:/etc/letsencrypt
+        - ./data/certbot/www:/var/www/certbot
         entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"

nginx.conf

-user  nginx;
-worker_processes  1;
-
-error_log  /var/log/nginx/error.log warn;
-pid        /var/run/nginx.pid;
-
-
-events {
-    worker_connections  1024;
-}
-
-http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
-
-    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-                      '$status $body_bytes_sent "$http_referer" '
-                      '"$http_user_agent" "$http_x_forwarded_for"';
-
-    access_log  /var/log/nginx/access.log  main;
-
-    sendfile        on;
-    #tcp_nopush     on;
-
-    keepalive_timeout  65;
-
-    #gzip  on;
-	
-    include /etc/nginx/conf.d/*.conf;
-
-    server {
-        listen 80;
-        root   /usr/share/nginx/html;
-        index  index.html index.htm;
-        server_name kuadrado-software.fr www.kuadrado-software.fr;
-        location / {
-            return 301 https://$host$request_uri;
-        }
-        location /.well-known/acme-challenge/ {
-            root /var/www/certbot;
-        }
-    }
-
-    server {
-        listen 443 ssl;
-        root   /usr/share/nginx/html;
-        server_name kuadrado-software.fr www.kuadrado-software.fr;
-        index  index.html index.htm;
-        ssl_certificate /etc/letsencrypt/live/kuadrado-software.fr/fullchain.pem;
-        ssl_certificate_key /etc/letsencrypt/live/kuadrado-software.fr/privkey.pem;
-
-        # https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf
-        ssl_session_cache shared:le_nginx_SSL:10m;
-        ssl_session_timeout 1440m;
-        ssl_session_tickets off;
-        ssl_protocols TLSv1.2 TLSv1.3;
-        ssl_prefer_server_ciphers off;
-        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
-        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
-        location / {
-            proxy_pass http://kuadrado-software.fr;
-        }
-    }
-}
-