mates
444191d16d
- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower) - install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore - ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton - hermes-install: Hermes CLI setup on macOS - macos-setup: Brewfile + osx-defaults + fish-config - home-nas-tools: metadata index for NAS projects (no binaries) - docs: architecture, security, contributing - README, LICENSE (MIT), .gitignore
63 lines
1.5 KiB
Markdown
63 lines
1.5 KiB
Markdown
# Nginx Proxy Manager
|
||
|
||
> Reverzní proxy s HTTPS (Let's Encrypt), web UI, ACL.
|
||
|
||
## 📋 Přehled
|
||
|
||
- **Image:** `jc21/nginx-proxy-manager:latest`
|
||
- **Porty:** `80`, `443`, `81` (admin UI)
|
||
- **User:** `1000:1000`
|
||
- **Network:** `bridge`
|
||
|
||
## 🚀 Instalace
|
||
|
||
```bash
|
||
cp .env.example .env
|
||
nano .env
|
||
|
||
docker compose up -d
|
||
```
|
||
|
||
## 🌐 Přístup
|
||
|
||
- **Admin UI:** `http://<server>:81` (default `admin@example.com` / `changeme`)
|
||
- **Změň heslo hned po prvním přihlášení!**
|
||
|
||
## 🔒 HTTPS
|
||
|
||
NPM umí automaticky generovat Let's Encrypt certifikáty:
|
||
|
||
1. **DNS A záznam** domény → server IP
|
||
2. NPM UI → Proxy Hosts → Add Proxy Host
|
||
3. Domain Names: `service.example.com`
|
||
4. Scheme: `http`, Forward: `<server>:PORT`
|
||
5. Záložka **SSL:** Request SSL Certificate, Let's Encrypt
|
||
6. Force SSL, HTTP/2, HSTS – vše zapnout
|
||
|
||
## 🔧 Pokročilé
|
||
|
||
- **Cloudflare DNS-01 challenge** – pro wildcard certifikáty
|
||
- **Access Lists** – whitelist IP pro citlivé služby
|
||
- **Redirection** – 301/302 přesměrování
|
||
- **Streams** – TCP/UDP proxy (SSH, databáze)
|
||
|
||
## 📁 Volumes
|
||
|
||
| Mount | Účel |
|
||
|---|---|
|
||
| `./data:/data` | NPM data, certifikáty, konfigurace |
|
||
| `./letsencrypt:/etc/letsencrypt` | Let's Encrypt certifikáty |
|
||
|
||
## 🔄 Aktualizace
|
||
|
||
```bash
|
||
docker compose pull
|
||
docker compose up -d
|
||
# Certifikáty zůstávají v ./letsencrypt/
|
||
```
|
||
|
||
## 📚 Dokumentace
|
||
|
||
- [NPM oficiální dokumentace](https://nginxproxymanager.com/docs/)
|
||
- [Let's Encrypt s NPM](https://nginxproxymanager.com/advanced-config/#ssl-certificates)
|