[Snyk] Security upgrade nginx from 1.21.4-alpine to 1.23.0-alpine (GeoNode#355)

Author: afabiani

docker/letsencrypt/crontab

@@ -1,9 +1,8 @@
-# .............. minute (0 - 59)
-# .     .............. hour (0 - 23)
-# .     .     .............. day of month (1 - 31)
-# .     .     .     .............. month (1 - 12)
-# .     .     .     .     .............. day of week (0 - 6) (Sunday to Saturday; 7 is also Sunday on some systems)
-# .     .     .     .     .
+# +------------- minute (0 - 59)
+# ¦     +------------- hour (0 - 23)
+# ¦     ¦     +------------- day of month (1 - 31)
+# ¦     ¦     ¦     +------------- month (1 - 12)
+# ¦     ¦     ¦     ¦     +------------- day of week (0 - 6) (Sunday to Saturday; 7 is also Sunday on some systems)
+# ¦     ¦     ¦     ¦     ¦
 
   0     0,12  *     *     *     date && echo "daily  " && /docker-entrypoint.sh
-

docker/nginx/Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx:1.17.2-alpine
+FROM nginx:1.23.0-alpine
 
 RUN apk add --no-cache openssl inotify-tools
 

docker/nginx/geonode.conf.envsubst

@@ -141,11 +141,15 @@ location / {
   proxy_set_header            X-Forwarded-Proto $scheme;
   proxy_hide_header           X-Frame-Options;
 
-  proxy_pass http://$upstream;
-
   # uwsgi_params
   include /etc/nginx/uwsgi_params;
 
+  # proxy_pass http://$upstream;
+  uwsgi_pass $upstream;
+
+  # when a client closes the connection then keep the channel to uwsgi open. Otherwise uwsgi throws an IOError
+  uwsgi_ignore_client_abort on;
+
   location ~* \.(?:js|jpg|jpeg|gif|png|tgz|gz|rar|bz2|doc|pdf|ppt|tar|wav|bmp|ttf|rtf|swf|ico|flv|woff|woff2|svg|xml)$ {
       gzip_static always;
       expires 30d;