Nginx Proxy Manager
acme-dns
Nginx Proxy Manager | acme-dns | |
---|---|---|
664 | 39 | |
26,707 | 2,403 | |
3.5% | 1.8% | |
8.9 | 2.6 | |
12 days ago | about 2 months ago | |
JavaScript | Go | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Nginx Proxy Manager
-
Zero Trust, One Router: Hardening Your Home Lab Like a Cyber Fortress.
Nginx Proxy Manager — self-hosted reverse proxy with SSL built-in
-
Self-hosting like a final boss: what I actually run on my home lab (and why)
Nginx Proxy Manager: if you want that dashboard life with SSL and subdomain routing.
-
Down the Rabbit Hole of creating a Home Lab
NGINX Proxy Manager - GUI for NGINX proxy management
-
The Good Karma Kit
I've been running a tor relay relay on my static IP at my home for over a year now and haven't seen any trouble from it.
On the other hand, Nginx Proxy Manager got me blocked by brightcloud for the dumbest reason imaginable - the word "proxy" on the default "it works" page - https://github.com/NginxProxyManager/nginx-proxy-manager/dis...
-
Adventures in Homelabbing: From Cloud Obsession to Self-Hosted Shenanigans
I began to self-host a Minecraft server using Crafty Controller, an Excalidraw instance, Docmost to replace Notion, Plane to replace Jira, and Penpot to replace Figma. To be able to access them from the internet, I used Nginx Proxy Manager to set up reverse proxies with SSL. You can use Traefik or Caddy instead, but I enjoyed the ease-of-use of NPM. For a dashboard solution, I started with Homarr, but later switched to Homepage because I'm apparently incapable of making a decision and sticking with it.
-
Blocking bots in Nginx
In our case, since we use proxymanager to manage the different domains, the entry of this configuration is done in the advanced section
- Nginx Proxy Manager
-
A story on home server security
If anyone is looking for one, https://nginxproxymanager.com/
Been using it for years and it’s been solid.
-
Blackcandy: Self hosted music streaming server
Most people will use nginx-proxy [0] or Traefik [1] for front ending home labs with LetsEncrypt certs... Beyond that people will protect them with things like Tailscale [2], Cloudflare Tunnels [3] or even just mTLS [4] for protected access.
Home labbing today has a lot of amazing software and it's hard to keep up!
And as for dashboarding [5] on top of all this there are a lot of options.
[0] https://nginxproxymanager.com/
-
Zoraxy: Open-Source, All in one homelab network routing solution
https://github.com/NginxProxyManager/nginx-proxy-manager/iss...
acme-dns
-
Migrating Mess with DNS to Use PowerDNS
Great question. My first pass at the project was looking to conform to the ACME DNS API [1]. There are some tools for cert management that use that API, so it gave me broad tool support with very little effort. The getlocalcert subdomains don't permit user modification of A, MX, or CNAME records on the public DNS; you've got to do that with a private DNS server you provide.
I may consider extending the service to allow A/AAAA records to private IP ranges, and then I'd need a more full featured API, but this far there hasn't been demand for the feature.
Hit me up on email if you want to chat more (in profile), we're solving some similar problems.
[1] https://github.com/joohoi/acme-dns
-
Free DDNS with Cloudflare and a Cronjob
there is also https://github.com/joohoi/acme-dns and LE clients like lego supporting it.
-
Subdomain.center – discover all subdomains for a domain
Getting a wildcard certificate from LE might be a better option, depending on how easy the extra bit of if plumbing is with your lab setup.
You need to use DNS based domain identification, and once you have a cert distribute it to all your services. The former can be automated using various common tools (look at https://github.com/joohoi/acme-dns, self-hosted unless you are only securing toys you don't really care about, if you self host DNS or your registrar doesn't have useful API access) or you can leave that as an every ~ten weeks manual job, the latter involves scripts to update you various services when a new certificate is available (either pushing from where you receive the certificate or picking up from elsewhere). I have a little VM that holds the couple of wildcard certificates (renewing them via DNS01 and acmedns on a separate machine so this one is impossible to see from the outside world), it pushes the new key and certificate out to other hosts (simple SSH to copy over then restart nginx/Apache/other).
Of course you may decide that the shin if your own CA is easier than setting all this up, as you can sign long lived certificates for yourself. I prefer this because I don't need to switch to something else if I decide to give friends/others access to something.
- Easy HTTPS for your private networks
-
I've created a solution for managing internal domains, how do I selfhost this more?
As someone else said, it’s a huge pain to run your own dns services. However, if you want some separation, I recently saw https://github.com/joohoi/acme-dns
-
LeGo CertHub v0.9.0 with Docker Support
v0.9.1 is out and natively supports both https://github.com/joohoi/acme-dns and any dns provider available in https://github.com/acmesh-official/acme.sh
-
How do you deal with SSL certs management?
I have set up an acme-dns server to answer ACME DNS Challenges: https://github.com/joohoi/acme-dns
- How to configure and use acme-dns?
-
What is a good alternative if port 80 is blocked?
The DNS challenge can be easily automated using https://github.com/joohoi/acme-dns - you do need an IP you can run a DNS server on though.
-
Setting up ssl on AGH
If your server is not accessible over the internet, you can still use Let's Encrypt or ZeroSSL to get a certificate. You'll just need to set up a DNS Challenge for things to work. This is a little more complicated, but can work even if your DNS provider doesn't have an API. For example, I use Google Domains and Google DNS (not cloud DNS) for my DNS server, but I've got an instance of acme-dns running on VPS box that handles the DNS auth for me. It's how every machine on my local network has valid certificates - but I annoyingly need to renew them every 90 days.
What are some alternatives?
traefik - The Cloud Native Application Proxy
acme-dns-server - Simple DNS server for serving TXT records written in Python
uptime-kuma - A fancy self-hosted monitoring tool
acme.sh - A pure Unix shell script implementing ACME client protocol
docker-swag - Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
LetsEncrypt-PRTG - Post request script to install an SSL certificate obtained with Certify the Web or win-acme in PRTG.