From 8cfec5474c61fa13d9cf12a4e5173a91ef62057e Mon Sep 17 00:00:00 2001
From: Leon Morival <leon.morival@gmail.com>
Date: Wed, 8 Jul 2026 20:29:20 +0200
Subject: [PATCH] feat: docker networks

---
 README.md          | 35 ++++++++++++++++++++++++++++++++++-
 docker-compose.yml | 11 +++++++++--
 2 files changed, 43 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index aa0a199..fa574c5 100644
--- a/README.md
+++ b/README.md
@@ -42,7 +42,40 @@ Le fichier `.env` du serveur doit contenir :
 DISCORD_WHITELIST_WEBHOOK_URL="https://discord.com/api/webhooks/..."
 ```
 
-Le conteneur expose l'app uniquement sur `127.0.0.1:3000`, pour la mettre derriere nginx.
+Le compose utilise un reseau Docker externe nomme `nginx`. Cree-le une seule fois sur le serveur si besoin :
+
+```bash
+docker network create nginx
+```
+
+Le conteneur n'expose pas de port directement sur l'hote. Ton conteneur nginx doit etre sur le meme reseau Docker et proxy vers :
+
+```text
+http://landing-server:3000
+```
+
+Exemple de bloc nginx :
+
+```nginx
+server {
+    listen 80;
+    server_name leonmorival.xyz www.leonmorival.xyz;
+
+    add_header X-Robots-Tag "noindex, nofollow, noarchive, nosnippet, noimageindex" always;
+
+    location / {
+        proxy_pass http://landing-server:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_cache_bypass $http_upgrade;
+    }
+}
+```
 
 ## Auto-update simple
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 5f8c977..c112472 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,11 +6,18 @@ services:
     restart: unless-stopped
     env_file:
       - .env
-    ports:
-      - "127.0.0.1:3000:3000"
+    expose:
+      - "3000"
+    networks:
+      - nginx
     healthcheck:
       test: ["CMD-SHELL", "wget -q --spider http://127.0.0.1:3000/ || exit 1"]
       interval: 30s
       timeout: 5s
       retries: 3
       start_period: 20s
+
+networks:
+  nginx:
+    external: true
+    name: nginx