khartool/nginx-acme repository overview

docker network create web

docker run --restart=always --network web -p 80:80 -p 443:443 -v /home/nginx/config:/etc/nginx/conf.d:Z -v /home/nginx/log:/var/log/nginx:Z -v /home/nginx/letsencrypt:/var/cache/nginx/acme-letsencrypt:Z -d --name nginx khartool/nginx-acme:<version>

server {
  server_name  example.com;

  listen       80;
  listen  [::]:80;

  location ^~ /.well-known {
  }

  location / {
    return 301 https://$host$request_uri;
  }
}

server {
  server_name  example.com;

  listen      443 ssl;
  listen [::]:443 ssl;

  acme_certificate letsencrypt;
  ssl_certificate $acme_certificate;
  ssl_certificate_key $acme_certificate_key;
  ssl_certificate_cache max=2;

  location / {
    proxy_pass http://<proxied/published server>;

    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;

    proxy_redirect http://$host https://$host;

    sendfile on;
    client_max_body_size 0;
    proxy_buffering off;
    proxy_request_buffering off;
  }
}