pixartprinting/tls-proxy repository overview

⁠docker-tls-proxy

A simple reverse proxy using NGINX in Docker for terminating TLS/SSL.

⁠Usage

⁠Build

$ docker build -t pixartprinting/tls-proxy .

⁠Run

An example:

docker run \
  -itd \
  -e UPSTREAM_HOST=icanhazip.com \
  -e FORCE_HTTPS=true \
  -e ENABLE_HTTP2=true \
  -e ENABLE_WEBSOCKET=true \
  -e SELF_SIGNED=true \
  -p 80:80 \
  -p 443:443 \
    pixartprinting/tls-proxy

⁠Runtime Environment Variables

There should be a reasonable amount of flexibility using the available variables. If not please raise an issue so your use case can be covered!

• TLS_CERTIFICATE - the TLS/SSL certificate (x509), with chain if needed
• TLS_KEY - the TLS/SSL key (x509)
• SELF_SIGNED - generate and use a self-signed certificate (true or false, default is false)
• SELF_SIGNED_SUBJECT - the subject DN (distinguished name) for the generated self-signed certificate
• FORCE_HTTPS - force (redirect plain HTTP requests) HTTPs (true or false, default is false)
• SERVER_NAME - the server name to listen with (default is _ which is any host name)
• LISTEN_PORT - listen port for the NGINX SSL port (default is 443)
• UPSTREAM_HOST - the hostname or IP to reverse proxy to (default is localhost)
• UPSTREAM_PORT - the upstream host's port (default is 80)
• ENABLE_WEBSOCKET - enable WebSocket support i.e. ws[s]:// (default is false)
• ENABLE_HTTP2 - enable HTTP/2 support (default is false)