esplo/docker-local-ssl-termination-proxy repository overview

⁠Docker Local SSL Termination Proxy

A simple SSL Termination Proxy for accessing https://localhost⁠.

This proxy is easy to use (1 command to launch) and nothing is installed on your local machine thanks to Docker.

⁠Requirement

• Docker (20.10.0+)

⁠Usage

Assume that your application is running on http://localhost:8000, the following command makes us accept requests to https://localhost.

⁠Mac OSX

docker run -it \
  -e "PORT=8000" \
  -p 443:443 \
  --rm \
  esplo/docker-local-ssl-termination-proxy

⁠Linux

docker run -it \
  --add-host=host.docker.internal:host-gateway
  -e "PORT=8000" \
  -p 443:443 \
  --rm \
  esplo/docker-local-ssl-termination-proxy

⁠Other platform

You need to make sure that host.docker.internal is resolved properly inside docker containers. For majority of platforms that don't resolve it automatically (like Docker Desktop for Mac), setting --add-host=host.docker.internal:host-gateway is enough.

⁠Test connection

$ curl -k https://localhost/

⁠Locally-trusted development certificates

The container can be configured to use custom certificates with the SSL_CERT and SSL_KEY environment variables. You can use mkcert⁠ to generate locally-trusted development certificates:

$ mkdir -p ssl
$ mkcert -install
$ mkcert --cert-file ssl/localhost.pem --key-file ssl/localhost.key localhost 127.0.0.1 ::1

and mount them to the container using bind mounts⁠:

$ docker run -it \
  -e 'PORT=8000' \
  -e 'SSL_CERT=localhost.pem' \
  -e 'SSL_KEY=localhost.key' \
  -p 443:443 \
  -v "$(pwd)"/ssl:/etc/nginx/ssl/ \
  --rm \
  esplo/docker-local-ssl-termination-proxy

⁠Troubleshoot

⁠"Your connection is not private" in Chrome

Click "Advanced" button, then click "Proceed anyway".

⁠License

See the LICENSE⁠ file for license rights and limitations (MIT).