I'm testing

Dockerfile

@@ -1,5 +0,0 @@
-FROM nginx:latest
-
-# Copy config
-COPY nginx.conf /etc/nginx/nginx.conf
-

docker-compose.yml

@@ -1,5 +1,15 @@
 services:
   nginx:
-    build: .
+    image: nginx:latest
     network_mode: "host"
+    volumes:
+      - ./nginx/conf/:/etc/nginx/conf.d/:ro
+      - ./certbot/www:/var/www/certbot/:ro
+      - ./certbot/conf/:/etc/nginx/ssl/:ro
+
+  certbot:
+    image: certbot/certbot:latest
+    volumes:
+      - ./certbot/www/:/var/www/certbot/:rw
+      - ./certbot/conf/:/etc/letsencrypt/:rw
 

nginx.conf

@@ -1,62 +0,0 @@
-events {}
-
-http {
-server {
-	listen 80;
-	return 301 https://$host$request_uri;
-}
-
-server {
-	server_name nextcloud.vanten-s.com;
-
-	location / {
-		proxy_pass http://127.0.0.1:11000$request_uri;
-
-		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-		proxy_set_header X-Forwarded-Port $server_port;
-		proxy_set_header X-Forwarded-Scheme $scheme;
-		proxy_set_header X-Forwarded-Proto $scheme;
-		proxy_set_header X-Real-IP $remote_addr;
-		proxy_set_header Accept-Encoding "";
-		proxy_set_header Host $host;
-									    
-		client_body_buffer_size 512k;
-		proxy_read_timeout 86400s;
-		client_max_body_size 0;
-	}
-
-    listen 80; 
-}
-
-server {
-	server_name vnc.vanten-s.com;
-	location / {
-		proxy_pass http://localhost:8089;
-	}
-
-    listen 80; 
-}
-
-server {
-	server_name forgejo.vanten-s.com;
-	client_max_body_size 0;
-	location / {
-		proxy_set_header Host $host;
-		proxy_set_header X-Real-IP $remote_addr;
-        	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        	proxy_set_header X-Forwarded-Proto $scheme;
-		proxy_pass http://172.21.0.3:3000/;
-	}
-
-    listen 80;
-}
-
-server {
-	server_name vanten-s.com www.vanten-s.com;
-	location / {
-		proxy_pass http://172.20.0.2:3000/;
-	}
-
-    listen 80; 
-}
-}

nginx/conf/nginx.conf

@@ -0,0 +1,69 @@
+events {}
+
+http {
+server {
+    listen 80;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    server_name nextcloud.vanten-s.com;
+
+    location / {
+            proxy_pass http://127.0.0.1:11000$request_uri;
+
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Scheme $scheme;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header Accept-Encoding "";
+            proxy_set_header Host $host;
+
+            client_body_buffer_size 512k;
+            proxy_read_timeout 86400s;
+            client_max_body_size 0;
+    }
+
+    listen 80;
+}
+
+server {
+    server_name vnc.vanten-s.com;
+    location / {
+            proxy_pass http://localhost:8089;
+    }
+
+    listen 80;
+}
+
+server {
+    server_name forgejo.vanten-s.com;
+    client_max_body_size 0;
+    location / {
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass http://172.21.0.3:3000/;
+    }
+
+    listen 80;
+}
+
+server {
+    server_name vanten-s.com www.vanten-s.com;
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+    
+
+    location / {
+            proxy_pass http://172.20.0.2:3000/;
+    }
+
+    listen 80;
+}
+}