Switch nginx for varnish

Author: Maypher

.github/workflows/deploy.yml

@@ -87,23 +87,23 @@ jobs:
           docker compose build
           docker image ls
           docker save -o payload.tar vector-portfolio-payload:latest
-          docker save -o nginx.tar vector-portfolio-nginx:latest
+          docker save -o varnish.tar vector-portfolio-varnish:latest
           pigz payload.tar
-          pigz nginx.tar
+          pigz varnish.tar
           rsync -aqc payload.tar.gz ${{ secrets.ssh_connection }}:~/vectorapp/vector-portfolio/
-          rsync -aqc nginx.tar.gz ${{ secrets.ssh_connection }}:~/vectorapp/vector-portfolio/
+          rsync -aqc varnish.tar.gz ${{ secrets.ssh_connection }}:~/vectorapp/vector-portfolio/
       - name: Pull changes
         run: |
           ssh -i ~/.ssh/id_rsa ${{ secrets.ssh_connection }} "
             cd ~/vectorapp/vector-portfolio
 
-            docker rmi -f vector-portfolio-nginx:latest
+            docker rmi -f vector-portfolio-varnish:latest
             docker rmi -f vector-portfolio-payload:latest
 
             docker load -q -i payload.tar.gz
-            docker load -q -i nginx.tar.gz
+            docker load -q -i varnish.tar.gz
             rm payload.tar.gz
-            rm nginx.tar.gz
+            rm varnish.tar.gz
 
             export DOMAIN="${{ vars.DOMAIN }}"
             export EMAIL_USER="${{ vars.EMAIL_USER }}"

docker-compose.dev.yml

@@ -8,10 +8,8 @@ services:
           path: .
           target: /app
           ignore: 
-          - node_modules
-          - nginx
-    stdin_open: true
-    tty: true
+          - node_modules/
+          - varnish/
     environment:
       - NEXT_PUBLIC_PAYLOAD_URL=http://${DOMAIN:?Website domain required}
   postgres:
@@ -22,17 +20,14 @@ services:
       - 5432:5432
     volumes: !override
       - pgdata_dev:/var/lib/postgresql/data
-  nginx:
+  varnish:
+    ports:
+      - 1001:80
     develop:
       watch:
-        - action: sync+restart
-          path: ./nginx/nginx.conf
-          target: /etc/nginx/nginx.conf
-        - action: rebuild
-          path: ./nginx/templates
-          target: /etc/nginx/templates/
-    ports:
-      -  1001:443
+        - path: ./varnish
+          action: sync+restart
+          target: /etc/varnish/
 
 volumes:
   pgdata_dev:

docker-compose.yml

@@ -25,19 +25,14 @@ services:
       - POSTGRES_PASSWORD_FILE=/run/secrets/postgres-password
     secrets:
       - postgres-password
-  nginx:
-    image: vector-portfolio-nginx
-    build:
-      context: ./nginx
-      args:
-        ENABLED_MODULES: cachepurge
+  varnish:
+    image: vector-portfolio-varnish
+    build: ./varnish
     restart: unless-stopped
     depends_on:
       - payload
     ports:
-      -  127.0.0.1:1000:443
-    environment:
-      - NGINX_HOST=${DOMAIN:?Website domain required}
+      -  127.0.0.1:1000:80
 volumes:
   pgdata:
   images:

nginx/Dockerfile

@@ -1,6 +1,6 @@
 'use server'
 
-const purgePath = 'http://nginx:1810/purge'
+const purgePath = 'http://varnish'
 
 /**Purges the given path from the nginx cache*/
 export default async function purgeRoute(path: string) {

nginx/modules/cachepurge/source

@@ -0,0 +1,3 @@
+FROM varnish:7.7.1-alpine
+
+COPY default.vcl /etc/varnish/

nginx/nginx.conf

@@ -0,0 +1,57 @@
+vcl 4.1;
+
+include "hit-miss.vcl";
+
+backend default {
+    .host = "payload";
+    .port = "3000";
+}
+
+acl purge {
+    "localhost";
+    "payload";
+}
+
+sub vcl_recv {
+    // Don't cache admin or api requests (unless it's for media)
+    if (req.url  ~ "^\/admin.*$" || req.url ~ "^\/api\/(?!media).*$") {
+        return(pass);
+    }
+
+    // Pipe websocket to the backend to enable hmr during development 
+    if (req.http.upgrade ~ "(?i)websocket") {
+        return (pipe);
+    }
+
+    if (req.method == "PURGE") {
+        if (!client.ip ~ purge) {
+            return(synth(405, "Not allowed"));
+        }
+        return(purge);
+    } elseif (req.method == "POST") {
+        // Don't cache post requests
+        return(pass);
+    }
+
+    return(hash);
+}
+
+sub vcl_hash {
+    // Cache all /_next/ requests
+    if (req.url ~ "^\/_next\/?.*$") {
+        hash_data(req.http.host);
+        hash_data(req.url);
+    } else {
+        // Replace params for all base urls
+       hash_data(regsub(req.url, "\?.*", ""));
+    }
+
+    return(lookup);
+}
+
+sub vcl_pipe {
+    if (req.http.upgrade) {
+        set bereq.http.upgrade = req.http.upgrade;
+        set bereq.http.connection = req.http.connection;
+    }
+}