How to change nginx config to launch docker app in browser?

Hi all,

I'm trying to set up an app that runs as docker image. Here is its config:

Code:

services:
  db:
    restart: always
    image: postgres:17
    volumes:
      - /var/fider/pg_data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: fider
      POSTGRES_PASSWORD: s0m3g00dp4ssw0rd
  app:
    restart: always
    image: getfider/fider:stable
    ports:
      - "80:3000"
    environment:
      # Public Host Name
      BASE_URL: http://localhost

      # Connection string to the PostgreSQL database
      DATABASE_URL: postgres://fider:s0m3g00dp4ssw0rd@db:5432/fider?sslmode=disable

      # Generate a secure secret, for example using https://jwtsecrets.com
      JWT_SECRET: VERY_STRONG_SECRET_SHOULD_BE_USED_HERE

      # From which account e-mails will be sent
      EMAIL_NOREPLY: noreply@yourdomain.com

      ###
      # EMAIL
      # Either EMAIL_MAILGUN_* or EMAIL_SMTP_* or EMAIL_AWSSES_* is required
      ###

      # EMAIL_MAILGUN_API: key-yourkeygoeshere
      # EMAIL_MAILGUN_DOMAIN: yourdomain.com
      # EMAIL_MAILGUN_REGION: US

      # EMAIL_SMTP_HOST: smtp.yourdomain.com
      # EMAIL_SMTP_PORT: 587
      # EMAIL_SMTP_USERNAME: user@yourdomain.com
      # EMAIL_SMTP_PASSWORD: s0m3p4ssw0rd
      # EMAIL_SMTP_ENABLE_STARTTLS: 'true'

      # EMAIL_AWSSES_REGION: us-east-1
      # EMAIL_AWSSES_ACCESS_KEY_ID: youraccesskeygoeshere
      # EMAIL_AWSSES_SECRET_ACCESS_KEY: yoursecretkeygoeshere

Here is the docs for reference: Hosting on Docker | Fider Docs

---

So it listens to port 80 and then runs http on port 3000.

I tried adding a proxy like this to vhost's nginx config but it returns bad gateway 502 error:

Code:

location / {
        proxy_pass http://localhost:3000;
  }

How do I properly set it up?

Trying to figure out how docker works.

Thanks
RB

• CentOS Version: AlmaLinux 8
• Centmin Mod Version Installed: 140.00beta01

 

Thank you George. You are the best as always. Will try it and will study the guides as well.

 

@eva2000 Ok, here is an update. I tried to mess with this for several hours but still no luck (

So on a new server with Almalinux 9 and centminmode 140b I followed your guide to the dot to install docker compose and then setup fider (also using your guide) I couldn't even get to the previous result where fider would launch on a custom port 8080. That's even before messing with nginx conf settings.

So after quite some time messing with different settings I decided to completely remove docker and install it a normal way:

Code:

dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
install docker-ce docker-ce-cli containerd.io
systemctl start docker.service
systemctl enable docker.service

Then I set up fider and was finally able to launch it without nginx via port 8080 (which makes me think that there is something wrong with your docker.sh addon as it wouldn't even let me do that. )

After that trying to edit nginx ssl.conf and docker-compose.yml following your instructions in the guide to try to make it work via https and without any ports all it does returns 502 bad gateway (((

I'm totally lost

yml with sensitive data removed:

Code:

services:
  db:
    restart: always
    image: postgres:17
    volumes:
      - /var/fider/pg_data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: fider
      POSTGRES_PASSWORD: xxxxx
  app:
    restart: always
    image: getfider/fider:stable
    ports:
      - "127.0.0.1:3000:3000"
    environment:
      # Public Host Name
      BASE_URL: https://vote.feedgi.com

      # Connection string to the PostgreSQL database
      DATABASE_URL: postgres://fider:xxxxx@db:5432/fider?sslmode=disable

      # Generate a secure secret, for example using https://jwtsecrets.com
      JWT_SECRET: xxxxx

      # From which account e-mails will be sent
      EMAIL_NOREPLY: xxxxx

      ###
      # EMAIL
      # Either EMAIL_MAILGUN_* or EMAIL_SMTP_* or EMAIL_AWSSES_* is required
      ###

      # EMAIL_MAILGUN_API: key-yourkeygoeshere
      # EMAIL_MAILGUN_DOMAIN: yourdomain.com
      # EMAIL_MAILGUN_REGION: US

      # EMAIL_SMTP_HOST: smtp.yourdomain.com
      # EMAIL_SMTP_PORT: 587
      # EMAIL_SMTP_USERNAME: user@yourdomain.com
      # EMAIL_SMTP_PASSWORD: s0m3p4ssw0rd
      # EMAIL_SMTP_ENABLE_STARTTLS: 'true'

      EMAIL_AWSSES_REGION: us-east-1
      EMAIL_AWSSES_ACCESS_KEY_ID: xxxxx
      EMAIL_AWSSES_SECRET_ACCESS_KEY: xxxxx

ssl.conf file:

Code:

# Upstream for Fider Docker container
upstream fider_backend {
    server 127.0.0.1:3000;
    keepalive 32;
}

server {
    listen 443 ssl http2;
    server_name vote.feedgi.com;

    # SSL certificates (managed by Centmin Mod/acme.sh)
    ssl_certificate /usr/local/nginx/conf/ssl/vote.feedgi.com/vote.feedgi.com.crt;
    ssl_certificate_key /usr/local/nginx/conf/ssl/vote.feedgi.com/vote.feedgi.com.key;

    # SSL configuration (Centmin Mod defaults)
    include /usr/local/nginx/conf/ssl_include.conf;

    # Logging
    access_log /home/nginx/domains/vote.feedgi.com/log/access.log combined buffer=256k flush=5m;
    error_log /home/nginx/domains/vote.feedgi.com/log/error.log;

    # Security headers
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;

    location / {
        proxy_pass http://fider_backend;

        # Essential proxy headers
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port $server_port;

        # WebSocket support (Fider uses WebSockets for real-time updates)
       # proxy_http_version 1.1;
       # proxy_set_header Upgrade $http_upgrade;
       # proxy_set_header Connection $connection_upgrade;

        # Timeouts
        proxy_connect_timeout 60s;
        proxy_send_timeout 60s;
        proxy_read_timeout 60s;

        # Buffering (adjust based on application needs)
        proxy_buffering on;
        proxy_buffer_size 4k;
        proxy_buffers 8 4k;
        proxy_busy_buffers_size 8k;
    }
# Static assets caching (if applicable)
    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
        proxy_pass http://fider_backend;
        proxy_set_header Host $host;
        proxy_cache_valid 200 30d;
        expires 30d;
        add_header Cache-Control "public, immutable";
    }
}

# HTTP to HTTPS redirect
server {
    listen 80;
    server_name vote.feedgi.com;
    return 301 https://$server_name$request_uri;
}

Here is vhost nginx error log snippet:

Code:

2026/02/05 00:55:15 [error] 69423#69423: *1 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.88, server: vote.feedgi.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:8080/", host: "vote.feedgi.com"
2026/02/05 00:55:16 [error] 69422#69422: *5 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.198.222, server: vote.feedgi.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://127.0.0.1:8080/favicon.ico", host: "vote.feedgi.com", referrer: "http://vote.feedgi.com/"
2026/02/05 00:55:16 [error] 69422#69422: *5 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.198.222, server: vote.feedgi.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:8080/", host: "vote.feedgi.com"
2026/02/05 00:55:16 [error] 69423#69423: *1 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.88, server: vote.feedgi.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://127.0.0.1:8080/favicon.ico", host: "vote.feedgi.com", referrer: "http://vote.feedgi.com/"
2026/02/05 00:57:53 [error] 69560#69560: *2 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.89, server: vote.feedgi.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:3000/", host: "vote.feedgi.com"
2026/02/05 00:57:54 [error] 69560#69560: *2 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.89, server: vote.feedgi.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://127.0.0.1:3000/favicon.ico", host: "vote.feedgi.com", referrer: "http://vote.feedgi.com/"
2026/02/05 00:57:55 [error] 69560#69560: *2 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.89, server: vote.feedgi.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:3000/", host: "vote.feedgi.com"
2026/02/05 00:57:55 [error] 69560#69560: *2 recv() failed (104: Connection reset by peer) while reading response header from upstream, client: 172.64.200.89, server: vote.feedgi.com, request: "GET /favicon.ico HTTP/1.1", upstream: "http://127.0.0.1:3000/favicon.ico", host: "vote.feedgi.com", referrer: "http://vote.feedgi.com/"

Note: domain is hosted at Cloudflare. I tested both ways: with proxy on or off.

 

It's seems like starting everything from scratch (by removing even docker completely) and then following your guide precisely step by step everything finally worked ).
The problem in the previous post was related to csf step not being setup correctly.