Docker-nginx-cloudflare-ssl-proxy

Supported tags

• latest, 1.10.3-ubuntu

What is nginx-cloudflare-ssl-proxy

This docker image is an open source serve proxy wep application server (WAS) for HTTPS using clouldflare full SSL

This help to use Cloudflare full SSL with Nginx and proxy to port of web application server in Production environment

It is licensed under MIT license and it made by limtaegeun. and contributors

How to use this image

Quick start

Preparation

• server domain managed by cloudflare DNS
• web application server like Node.js express server run by docker image

1. Create your origin certificate and private key

See here

https://kb.virtubox.net/knowledgebase/cloudflare-ssl-origin-certificates-nginx/

And save or copy .pem and .key files in your server

Assume .pem and .key file name is cert.pem and cert.key

2. a) Run Nginx

run WAS using port 3000

$ docker run -d -v /some/certs:/etc/nginx/certs --name nginx-ssl --network host -e SERVER_NAME=your.domain.com imori333/nginx-cloudflare-ssl-proxy

2. b) when run WAS by container like Docker

Create Docker network

$ docker network create nginx-net

Run web application server by container

Assume WAS use port 3000

$ docker run -d -v config:/usr/src/app/config --name nodejs --network nginx-net your-was

Run nginx-cloudflare-ssl-proxy

$ docker run -d -v /some/certs:/etc/nginx/certs --name nginx-ssl -p 443:443 -p 80:80 --network nginx-net -e PROXY_PASS=nodejs:3000 -e SERVER_NAME=your.domain.com imori333/nginx-cloudflare-ssl-proxy

Using environment variables

• PROXY_PASS : your proxy pass url - default : localhost:3000
• SERVER_NAME : your domain name - default : myserver.com
• PEM_PATH : .pem file path - default : /etc/nginx/certs/cert.pem
• KEY_PATH : private key file path - default : /etc/nginx/certs/cert.key

example

when your certificate and private key name and path is different

$ docker run -d -v /some/certs:/etc/nginx/other --name nginx-ssl \ 
-p 443:443 -p 80:80 --network nginx-net -e SERVER_NAME=your.domain.com\
-e PEM_PATH=/etc/nginx/other/mycert.pem \
-e KEY_PATH=/etc/nginx/other/mycert.key \
imori333/nginx-cloudflare-ssl-proxy

License

MIT license

Copyright (c) 2020-present, limtaegeun.