feat: enable SSL for block explorer

[parketh]

Summary

This PR updates the Blockscout deployment configs to support SSL.

Details

The Blockscout docker compose uses an nginx reverse proxy to route traffic between internal containers (frontend, backed, stats etc). We add a second nginx instance at the server level to route domain traffic to the internal Docker network.

The frontend also makes calls to its own /api, /socket routes. Since the site is setup for SSL we need to config these to use their secure variants (https, wss) in Blockscout.

Server-level nginx:

server {
    listen 443 ssl;
    server_name tohma.explorer.snapcha.in;

    ssl_certificate /etc/letsencrypt/live/tohma.explorer.snapcha.in/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/tohma.explorer.snapcha.in/privkey.pem;

    location ~ ^/(api|socket|sitemap.xml|auth/auth0|auth/auth0/callback|auth/logout) {
        proxy_pass http://localhost:80;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    location / {
        proxy_pass http://localhost:80;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

Test plan

Visit https://tohma.explorer.snapcha.in/

[lesterli]

we can also use the sed -i.bak which works on both macOS and Linux, but need to remove the generated backup file, like:

sed -i.bak "s|^L1_SYSTEM_CONFIG_CONTRACT=.*|L1_SYSTEM_CONFIG_CONTRACT=$L1_SYSTEM_CONFIG_ADDRESS|" "$ENV_FILE"
rm $ENV_FILE.bak

[parketh]

thanks, updated!

[bap2pecs]

should we add a Make command?

[bap2pecs]

#25