Container w/ NGINX & LetsEncrypt
Go to file
Daniel Wolf 61b2297509 remove pip after use 2018-12-28 15:58:48 -05:00
override/etc add cronjob to renew ssl certs 2018-12-27 11:09:24 -05:00
.dockerignore initial commit 2018-05-02 14:35:49 -04:00
Dockerfile remove pip after use 2018-12-28 15:58:48 -05:00
LICENSE.md initial commit 2018-05-02 14:35:49 -04:00
README.md updated readme 2018-12-27 12:07:35 -05:00

README.md

Git Repo | DockerHub | unRAID Template

NGINX Application Container

This docker container manages the NGINX application, a lightweight web server and reverse proxy.

Configuration

  • {config}/etc/crontab: Crontab Entries
  • {config}/etc/logrotate.conf: Logrotate General Configuration
  • {config}/etc/logrotate.d/*: Logrotate Per-Application Configuration
  • {config}/etc/mime.types: NGINX MIME Types
  • {config}/etc/nginx.conf: NGINX General Configuration
  • {config}/etc/nginx.d/*: NGINX Per-Site Configuration
  • {config}/ssl/live/{site}/: SSL/TLS certificates

This container is primarily intended to be used as a reverse proxy/cache to access other dockers. You can certainly serve static content, but tools like PHP or MySQL are not included.

Certbot is installed and can request SSL certificats from LetsEncrypt on your behalf assuming you have entered the appropriate values. DNS challenges are not supported until I can come up with a good way to automate it. Unfortunately, that means wildcard certificates cannot be requested at this time.

NOTE: If you have trouble connecting from an older device or browser when using HTTPS, you may need to change the ciphers allowed in {config}/etc/nginx.d/_ssl.inc to be more permissive.

Ports

  • 80/tcp: HTTP Port
  • 443/tcp: HTTPS Port

Variables

  • ADMINIP: Administrative Access IP
  • DNSADDR: Resolver IPs (Space-Delimited)
  • PUID: Volume Owner UID
  • PGID: Volume Owner GID
  • SSLEMAIL: LetsEncrypt Email Address
  • SSLDOMAINS: LetsEncrypt (Sub)domains (comma-delimited)
  • TZ: Time Zone

Mount Points

  • /mnt/config: Configuration/Logs