Certificates, reverse proxy? reddit / selfhosted ---------------------------------------------------------------------- zandadoum · 2023-10-25 13:39 Hello, Up to now, this is how I dealt with my certificates: - on my online vps server, I just create a new a name on dns like newapp.mydomain.com that points to my home ip - at home I have a Synology NAS that is the one in charge of getting and renewing letsencrypt certs and acting as reverse proxy pointing to my docker containers. It’s also my local dns server. This last part is what I’d like to change as I am trying to move away from Synology packages and onto dockerized stuff. So, I’d like to manage my certs, reverse proxy and eventually dns from within docker containers. With a GUI if possible as I remember graphical things better than command line commands. Does something like this exist? ---------------------------------------------------------------------- clintkev251 · 2023-10-25 14:08 It sounds like you're looking for Nginx Proxy Manager which is a reverse proxy with a GUI. Like basically all reverse proxies it implements certbot to handle provisioning Letsencrypt certificates for you ---------------------------------------------------------------------- zandadoum · 2023-10-25 14:09 Thx. Now I know what I am looking for. Is there any specific one you could suggest? ---------------------------------------------------------------------- Lancaster1983 · 2023-10-25 14:14 It's literally [this](https://nginxproxymanager.com/). It's a great interface. ---------------------------------------------------------------------- zandadoum · 2023-10-25 14:14 >It's literally this. > >It's a great interface. doh! thanks a lot. i thought i'd have to chose from like a million projects :D ---------------------------------------------------------------------- clintkev251 · 2023-10-25 14:14 That's the name of the product. "Nginx Proxy Manager". That's what I would suggest if you're looking for a reverse proxy which runs in docker and has a GUI. I'm pretty sure it's the only one that fits those requirements, or at least the most popular. ---------------------------------------------------------------------- Lancaster1983 · 2023-10-25 15:09 I run mine in a Docker container on an LXC by itself as it's kind of the backbone of all my web apps. Easy to migrate and backup. ---------------------------------------------------------------------- tenekev · 2023-10-25 18:54 I've been using such setup for years. Traefik Reverse Proxy can manage certs automatically. It's designed to sit in front of containerized services is Docker or Kubernetes. In case of Docker, it has access to the docker socket and reads labels for each container, creating the necessary configuration automatically. That means the configuration for 99% of the services to you are running inside docker is repeating and is stored in the docker-compose file as docker labels. Yes, you need to write a bit of yml, opposed to clicking GUIs but the setup is infinitely more resilient, once you write it down. TechnoTim has videos on this. Watch them in order - setting up a DNS service and then setting up Traefik RP. https://www.youtube.com/watch?v=kKsHo6r4_rc https://www.youtube.com/watch?v=liV3c9m_OX8 ---------------------------------------------------------------------- zandadoum · 2023-10-25 19:00 thx for this info, could you answer a couple questions before i delve deeper? \- is traefik free? \- can it access the docker socket remotely? i have another LXC with all my docker in it and i don't want to put anything else on that LXC \- or can traefik run inside docker itself too? ---------------------------------------------------------------------- tenekev · 2023-10-25 19:05 Traefik is free and it's just another container that runs inside Docker. You could install it stand-alone but there is 0 reasons to do so. Its strength is in running containerized and scaling on demand. ---------------------------------------------------------------------- sarkyscouser · 2023-10-25 19:15 Take a look at Caddy as well