add update nginx config to domain and create production setup docker

docker-compose.prod.yml

@@ -10,11 +10,11 @@ services:
       - ./storage:/var/www/html/storage
       - ./bootstrap/cache:/var/www/html/bootstrap/cache
       - ./docker/php.ini:/usr/local/etc/php/conf.d/local.ini
-    ports:
-      - "80:80"
     environment:
       - APP_ENV=production
       - APP_DEBUG=false
+      - APP_URL=https://bengkel.digitaloasis.xyz
+      - TRUSTED_PROXIES=*
     depends_on:
       - db
       - redis
@@ -34,8 +34,8 @@ services:
     volumes:
       - mysql_data:/var/lib/mysql
       - ./docker/mysql.cnf:/etc/mysql/conf.d/mysql.cnf:ro
-    ports:
-      - "3306:3306"
+    expose:
+      - "3306"
     networks:
       - ckb-network
     command: --default-authentication-plugin=mysql_native_password
@@ -47,8 +47,8 @@ services:
     command: redis-server --appendonly yes ${REDIS_PASSWORD:+--requirepass $REDIS_PASSWORD}
     volumes:
       - redis_data:/data
-    ports:
-      - "6379:6379"
+    expose:
+      - "6379"
     networks:
       - ckb-network
 
@@ -57,20 +57,44 @@ services:
     container_name: ckb-nginx-proxy
     restart: unless-stopped
     ports:
+      - "80:80"
       - "443:443"
     volumes:
-      - ./docker/nginx-proxy.conf:/etc/nginx/nginx.conf
-      - ./docker/ssl:/etc/nginx/ssl
+      - ./docker/nginx-proxy.conf:/etc/nginx/nginx.conf:ro
+      - ssl_certificates:/etc/nginx/ssl:ro
+      - certbot_www:/var/www/certbot:ro
+      - nginx_logs:/var/log/nginx
     depends_on:
       - app
     networks:
       - ckb-network
+    environment:
+      - DOMAIN=bengkel.digitaloasis.xyz
+
+  certbot:
+    image: certbot/certbot
+    container_name: ckb-certbot
+    restart: "no"
+    volumes:
+      - ssl_certificates:/etc/letsencrypt
+      - certbot_www:/var/www/certbot
+    command: certonly --webroot --webroot-path=/var/www/certbot --email admin@digitaloasis.xyz --agree-tos --no-eff-email -d bengkel.digitaloasis.xyz -d www.bengkel.digitaloasis.xyz
+    depends_on:
+      - nginx-proxy
+    networks:
+      - ckb-network
 
 volumes:
   mysql_data:
     driver: local
   redis_data:
     driver: local
+  ssl_certificates:
+    driver: local
+  certbot_www:
+    driver: local
+  nginx_logs:
+    driver: local
 
 networks:
   ckb-network: