invarians/nginx-tls-termination repository overview

⁠Documentation

⁠Getting a certificate from Let's encrypt

docker exec -it tls-foo /certbot.sh

⁠Environment variable documentation

• LISTEN_PORT_HTTP

  Defaults to 80. Nginx will listen on this port and redirect $DOMAIN to https for all paths except /.well-known which is used by letsencrypt's certbot.

• LISTEN_PORT_TLS

  Defaults to 443. Nginx will listen on this port and pass any traffic on $DOMAIN or www.$DOMAIN⁠ on to http://$PROXY_TARGET

• DOMAIN

  Required. E.g. nginx-foo.avacati.net Which virtual host nginx should host. www.$DOMAIN⁠ will also be added automatically.

• PROXY_TARGET

  Required. E.g. 127.0.0.1:83 Which host and port(defaults to 80) nginx should forward requests to.

• HTTP_TO_HTTPS_REDIRECT_HOST_AND_PORT

  Defaults to $DOMAIN:$LISTN_PORT_TLS. E.g. nginx-foo.avacati.net How nginx can be reached from the client. Port 80 will redirect to this, and redirects from the $PROXY_TARGET will be rewritten to this.

• LETSENCRYPT_EMAIL

  Required. Letsencrypt will send expiration notifications to this email address. See https://letsencrypt.org/docs/expiration-emails/⁠