tiyn/wiki
1
0
Fork 0
mirror of https://github.com/tiyn/wiki.git synced 2026-02-22 10:24:47 +01:00
Code Issues Projects Releases Wiki Activity

markdown syntax: formatted all files with prettier

Browse Source
This commit is contained in:
TiynGER
2020-11-01 16:06:38 +01:00
parent 0b7e2aa41b
commit 2951efa92e
45 changed files with 762 additions and 625 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
wiki/nginx.md
View File

@@ -4,7 +4,8 @@
### Docker
The easiest way to configure and run nginx is [ncdt](https://github.com/nasourso/nginx-certbot-docker-tui) by nasourso.
The easiest way to configure and run nginx is
[ncdt](https://github.com/nasourso/nginx-certbot-docker-tui) by nasourso.
So the first step is downloading it.
`wget https://raw.githubusercontent.com/nasourso/nginx-certbot-docker-tui/master/src/ncdt.sh`
@@ -15,14 +16,18 @@ You can then configure reverse proxies by adding websites.
#### Block remote port access
If you configured a reverse proxy to a port chances are you don't want the port to be accessed outside of the proxy.
Especially if you set up a authentication over nginx the open port will avoid the authentication.
This can be changed at the forwarded docker-service by replacing for example `-p 7000:7000` with `-p 172.17.0.1:7000:7000`.
This forces the docker container to only expose the port in the docker bridge network, effectively banning remote access.
If you configured a reverse proxy to a port chances are you don't want the port
to be accessed outside of the proxy.
Especially if you set up a authentication over nginx the open port will avoid
the authentication.
This can be changed at the forwarded docker-service by replacing for example
`-p 7000:7000` with `-p 172.17.0.1:7000:7000`.
This forces the docker container to only expose the port in the docker bridge
network, effectively banning remote access.
#### Rebuild
```
```shell
#!/bin/sh
docker-compose down
docker pull nginx:latest