Fabio/nginx-proxy-auto-docker
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Adds SSL support

Browse source
This commit is contained in:
Morten Sjøgren 2014-06-23 10:52:41 +02:00
parent b9d7bde5cd
commit 6b3a504e73
3 changed files with 32 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
Dockerfile
View file

@ -24,6 +24,7 @@ RUN wget https://github.com/jwilder/docker-gen/releases/download/0.3.0/docker-ge
RUN tar xvzf docker-gen-linux-amd64-0.3.0.tar.gz
EXPOSE 80
EXPOSE 443
ENV DOCKER_HOST unix:///tmp/docker.sock
CMD ["forego", "start", "-r"]

2
README.md
View file

@ -6,7 +6,7 @@ See [Automated Nginx Reverse Proxy for Docker][2] for why you might want to use
To run it:
$ docker run -d -p 80:80 -v /var/run/docker.sock:/tmp/docker.sock -t jwilder/nginx-proxy
$ docker run -d -p 80:80 -p 443:443 -v /var/run/docker.sock:/tmp/docker.sock -v /path/to/nginx/certificates:/etc/nginx/certificates -t jwilder/nginx-proxy
Then start any containers you want proxied with an env var VIRTUAL_HOST=subdomain.youdomain.com

30
nginx.tmpl
View file

@ -57,4 +57,34 @@ server {
proxy_set_header Connection "";
}
}
server {
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
listen 443;
server_name {{ $host }};
proxy_buffering off;
error_log /proc/self/fd/2;
access_log /proc/self/fd/1;
ssl on;
ssl_certificate /etc/nginx/certificates/server.crt;
ssl_certificate_key /etc/nginx/certificates/server.key;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://{{ $host }};
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; # help the backend application differenciate between HTTP/HTTPS
proxy_set_header HTTPS on;
}
}
{{ end }}