8 ms·
I'd suggest people looking to do something similar to this to check out Caddy as a reverse proxy for your services. It'll manage grabbing SSL certs for you and
by gravypod 8y ago
I'd suggest people looking to do something similar to this to check out Caddy as a reverse proxy for your services. It'll manage grabbing SSL certs for you and some people have already wrapped it into a nice docker container for you [0].
[0] - https://github.com/wemake-services/caddy-gen https://github.com/wemake-services/caddy-gen
- 0xCMP 8y agoCaddy is really nice. I use it on my Synology NAS which can use Docker containers and it works very well.
- lytedev 8y agoI recently had the pleasure of using Traefik[0] as my reverse proxy, which similarly handles SSL automatically via LetsEncrypt. Lovely piece of software! [0]: https://traefik.io https://traefik.io
- gravypod 8y agoYea, I've hears good things about it. My friend runs it as their load balancer + ingress for their k8s cluster.
- windexh8er 8y agoI recently upgraded my simple web facing CV site over to a couple containers and front-ended with Traefik. What's really nice about it is if you run the host as a single-node Swarm you get a lot of freebies with regard to service discovery. I also use Traefik in my internal network to front-end Heimdall [0] in a container. This affords me a very elegant internal network dashboard, bastion host (proxy) and presents all my internal services with LetsEncrypt valid certificates (no more internal self-signed cert warnings). I've been meaning to start blogging again and use this as a first topic. [0]: https://heimdall.site/ https://heimdall.site/