4 ms·

I stopped trusting this application when I realized my some of my self hosted services were exposed without authentication, despite the configuration being set.

I stopped trusting this application when I realized my some of my self hosted services were exposed without authentication, despite the configuration being set. Apparently there had been an bug open for months that authentication didn't work. I accept it's my fault for not re-testing this often, but what a huge issue. It's vanilla Nginx or Caddy from here on out, it's not worth introducing a third-party security risk.

zrail 4y ago
Mine just stops renewing certificates so I stopped fighting it. Haven't replaced it with vanilla Nginx yet but that's a project on my todo list.
- metadat 4y ago
  You might also consider using the fully OSS Traefik for a load balancer and proxy. It arrives to be friendly and approachable. https://github.com/traefik/traefik https://github.com/traefik/traefik
- jacooper 4y ago
  You can try nginx-proxy, its similar to trafeik but based in nginx and a bit easier. https://github.com/nginx-proxy/nginx-proxy https://github.com/nginx-proxy/nginx-proxy
KMnO4 4y ago
I have a bug where every time my server restarts and Nginx Proxy Manager starts up, it gives all my proxy hosts incorrect SSL certificates. In order to get my services working again I have to open NPM, manually open each host, and press edit, and (without making changes), press save. This bug has existed for a year and a half in Github without any response from the developers. As much as I like NPM, I need to move onto something more reliable.
jonasal 4y ago
I also prefer to run Nginx as vanilla as possible, but having automatic renewal of certificates is something which is really nice. I looked around at some of the more popular solutions, but didn't like the mounting of the docker socket required by [acme-companion][1], or the lack of bootstrapping capability of [nginx-certbot][2], so I made [something][3] that solved both of those issues. A self contained Docker container that is able to populate the certificate request form what you write in your Nginx configuration files. Please check it out if you have time, and I will gladly take any feedback if you have any! [1]: https://github.com/nginx-proxy/acme-companion https://github.com/nginx-proxy/acme-companion [2]: https://github.com/wmnnd/nginx-certbot https://github.com/wmnnd/nginx-certbot [3]: https://github.com/JonasAlfredsson/docker-nginx-certbot https://github.com/JonasAlfredsson/docker-nginx-certbot
You-Are-Right 4y ago

zrail 4y ago

Mine just stops renewing certificates so I stopped fighting it. Haven't replaced it with vanilla Nginx yet but that's a project on my todo list.

metadat 4y ago
You might also consider using the fully OSS Traefik for a load balancer and proxy. It arrives to be friendly and approachable. https://github.com/traefik/traefik https://github.com/traefik/traefik
jacooper 4y ago
You can try nginx-proxy, its similar to trafeik but based in nginx and a bit easier. https://github.com/nginx-proxy/nginx-proxy https://github.com/nginx-proxy/nginx-proxy

KMnO4 4y ago

I have a bug where every time my server restarts and Nginx Proxy Manager starts up, it gives all my proxy hosts incorrect SSL certificates. In order to get my services working again I have to open NPM, manually open each host, and press edit, and (without making changes), press save. This bug has existed for a year and a half in Github without any response from the developers. As much as I like NPM, I need to move onto something more reliable.

jonasal 4y ago

I also prefer to run Nginx as vanilla as possible, but having automatic renewal of certificates is something which is really nice. I looked around at some of the more popular solutions, but didn't like the mounting of the docker socket required by [acme-companion][1], or the lack of bootstrapping capability of [nginx-certbot][2], so I made [something][3] that solved both of those issues. A self contained Docker container that is able to populate the certificate request form what you write in your Nginx configuration files. Please check it out if you have time, and I will gladly take any feedback if you have any! [1]: https://github.com/nginx-proxy/acme-companion https://github.com/nginx-proxy/acme-companion [2]: https://github.com/wmnnd/nginx-certbot https://github.com/wmnnd/nginx-certbot [3]: https://github.com/JonasAlfredsson/docker-nginx-certbot https://github.com/JonasAlfredsson/docker-nginx-certbot

You-Are-Right 4y ago