Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extract nginx away from console container #240

Open
ygrishajev opened this issue Jun 17, 2024 · 0 comments
Open

Extract nginx away from console container #240

ygrishajev opened this issue Jun 17, 2024 · 0 comments
Labels
tech-debt Technical debt

Comments

@ygrishajev
Copy link
Collaborator

Current Issue:
Currently, Nginx and SSL are configured within the same image that's running the application container. This setup mixes application logic with infrastructure concerns, leading to several issues:

  • Separation of Concerns: The current configuration mixes application logic with infrastructure (reverse proxy and SSL), which should be handled separately.
  • Environment Differences: The local environment doesn't require a reverse proxy, while the remote environment does. This discrepancy leads to code duplication and complicates maintenance.
  • Maintainability: Combining these concerns into a single container creates confusion and makes it harder to maintain the setup.
  • Security: Harder to implement unprivileged access for the application/proxy

Proposed Solution:
To address these issues, we should separate the Nginx and SSL configuration into a sidecar container. This is a common pattern that helps isolate infrastructure concerns from application logic.

Benefits:

  • Clear Separation: By using a sidecar container, the application logic and infrastructure concerns are clearly separated.
  • Consistency Across Environments: This setup allows for a consistent configuration between local and remote environments, reducing code duplication and maintenance complexity.
  • Simplified Maintenance: Maintaining and updating the reverse proxy and SSL configurations become easier when they are isolated from the application container.

Implementation Guide:
There is a comprehensive guide on how to implement an Nginx sidecar on Google Cloud Platform (GCP). This guide can be adapted to our needs to set up the sidecar container effectively.
Implementing Nginx Sidecar on GCP

@ygrishajev ygrishajev added the tech-debt Technical debt label Jun 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tech-debt Technical debt
Projects
None yet
Development

No branches or pull requests

1 participant