NGINX-LE - Nginx web and proxy with automatic let's encrypt

Simple nginx image (alpine based) with integrated Let's Encrypt support. Alternative version of original umputun's image, reduced in size and simplified by using acme.sh shell-script.

How to use

• get docker-compose.yml and change things:
  • set timezone to your local, for example TZ=UTC. For more timezone values check /usr/share/zoneinfo directory
  • set FQDN, like LE_FQDN=www.example.com
  • use provided conf/service.conf to make your own etc/service.conf. Keep ssl directives as is:

    ssl_certificate         SSL_CERT;
    ssl_certificate_key     SSL_KEY;
    ssl_trusted_certificate SSL_CHAIN;

• pull image - docker-compose pull
• if you don't want pre-built image, make you own. docker-compose build will do it
• start it docker-compose up

Some implementation details

• based on nginx-le image by umputun, reduced in size ~3 times
• image uses acme.sh shell-script for certificates issue & renewal
• no multi-domain support at this moment
• original acme.sh cron job will take care of certificate renewal
• nginx-le on docker-hub
• A+ overall rating on ssllabs

Alternatives

• Træfik HTTP reverse proxy and load balancer. Supports Let's Encrypt directly.
• Caddy supports Let's Encrypt directly.
• leproxy small and nice (stand alone) https reverse proxy with automatic Letsencrypt
• bunch of others

Examples

• Redmine. Change TZ, FQDN, database password and run

  docker-compose -f example/docker-compose-redmine.yml up -d