Selfhosted

60426 readers

234 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Best reverse proxy with ACME to run in docker (lemmy.world)

submitted 4 months ago by reabsorbthelight@lemmy.world to c/selfhosted@lemmy.world

38 comments fedilink hide all child comments

I've been self hosting traditionally in debian, but I would like to be able to add services easier using docker. As such, I'm looking to move to a container based architecture.

One place I struggle is that I can't seem to find a good container where the default image supports ACME to support Let's encrypt for automatic cert renewal.

For Nginx, I would have you build my container. HAproxy ACME support seems to be a shell script.

Any suggestions?

you are viewing a single comment's thread
view the rest of the comments

[–] SpicySquid@lemmy.ml 13 points 4 months ago (1 children)

This is usually where something like Traefik comes in. It will reverse proxy the docker instance and it can be configured to handle let's encrypt. The are also other options I like nginx proxy manager and I think Caddy also can do this, by I don't have experience with that.

[–] cybervseas@lemmy.world 13 points 4 months ago (2 children)

Yep I use caddy for all that. Bonus is caddy has a docker compose proxy plugin where all your domain/port/cert config can be part of your each application’s compose file, rather than needing to make adjustments in caddy centrally. Works great for my purposes.

[–] pr3d@eviltoast.org 7 points 4 months ago

thanks for mentioning the Caddy-Docker-Proxy plugin.

[–] KyuubiNoKitsune@lemmy.blahaj.zone 2 points 4 months ago

Traefik does the same thing with docker labels.