Add smart form ide

compose.yaml

@@ -83,3 +83,6 @@ services:
     matchbox:
       image: eu.gcr.io/fhir-ch/matchbox:v314
       profiles: ["production"]
+    smart-form-ide
+      image: ghcr.io/beda-software/smart-form-ide:latest
+      profiles: ["production"]

nginx/matchbox.conf

@@ -24,8 +24,8 @@ server {
   resolver 8.8.8.8 8.8.4.4 valid=300s;
   resolver_timeout 5s;
 
-  ssl_certificate     /etc/letsencrypt/live/au-core.beda.software/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/au-core.beda.software/privkey.pem;
+  ssl_certificate     /etc/letsencrypt/live/matchbox.au-core.beda.software/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/matchbox.au-core.beda.software/privkey.pem;
 
   client_max_body_size 20m;
 

nginx/smart-form-ide.conf

@@ -0,0 +1,42 @@
+upstream smart-form-ide-of-fhir-emr {
+  least_conn;
+  server smart-form-ide:5000;
+}
+
+server {
+  listen      443           ssl http2;
+  server_name ide.au-core.beda.software;
+
+  add_header                Strict-Transport-Security "max-age=31536000" always;
+  add_header X-Content-Type-Options nosniff;
+  add_header X-XSS-Protection "1; mode=block";
+
+  ssl_protocols TLSv1.3;
+  ssl_prefer_server_ciphers on;
+
+  ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
+  ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
+  ssl_session_timeout  10m;
+  ssl_session_cache shared:SSL:10m;
+  ssl_session_tickets off; # Requires nginx >= 1.5.9
+  ssl_stapling on; # Requires nginx >= 1.3.7
+  ssl_stapling_verify on; # Requires nginx => 1.3.7
+  resolver 8.8.8.8 8.8.4.4 valid=300s;
+  resolver_timeout 5s;
+
+  ssl_certificate     /etc/letsencrypt/live/ide.au-core.beda.software/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/ide.au-core.beda.software/privkey.pem;
+
+  client_max_body_size 20m;
+
+  location / {
+    proxy_http_version 1.1;
+    expires off;
+    proxy_buffering off;
+    chunked_transfer_encoding on;
+    proxy_pass        http://smart-form-ide-of-fhir-emr/;
+    proxy_set_header  Host      $host;
+    proxy_set_header  X-Real-IP $remote_addr;
+  }
+
+}