DEV Community: Lim Guan Ji

Setup your NGINX proxy manager

Lim Guan Ji — Thu, 22 Jun 2023 13:47:27 +0000

Hi Folks,
If you guys are looking to do self hosting and are considering between Traefik and NGINX proxy manager, look no further.
NGINX offers a good user experience to setup your very own self hosting environment.
This guide will teach you how to setup NGINX as your proxy manager.

First step
Installation of docker on your Linux environment.
[Docker Install documentation]

(https://docs.docker.com/get-docker/)
Docker-Compose Install documentation

Depending on your OS, your download may vary, Redh8 does not support docker anymore, I would recommend Kali OS as I am using it.
Verify that you have docker and docker-compose installed successfully.

version: '3'
services:
  nginx:
    container_name: nginx
    image: 'jc21/nginx-proxy-manager:latest'
    restart: always
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    volumes:
      - ./config.json:/app/config/production.json
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
  db:
    image: 'yobasystems/alpine-mariadb:latest'
    environment:
      MYSQL_ROOT_PASSWORD: 'npm'
      MYSQL_DATABASE: 'npm'
      MYSQL_USER: 'npm'
      MYSQL_PASSWORD: 'npm'
    volumes:
      - ./data/mysql:/var/lib/mysql

Create a docker-compose.yml file in your directory, run docker-compose up -d

Setup your router to have a Port Forwarding.
In this case, I censored out my IP address and the ports that are exposed, you will require to expose your port to the public. Also get to know what is your public IP from https://whatismyipaddress.com/ and access via your exposed port.

For your first login, please use the below credentials.
You will be prompt to create a user thereafter.
admin@example.com changeme

Lastly, setup your domain to be signed with an SSL cert

Pls note, you will have to purchase a domain to get an SSL on your website.
Happy self-hosting~

Self Hosting WordPress

Lim Guan Ji — Sat, 02 Jan 2021 09:12:46 +0000

My latest obsession has been self-hosting ever since getting my Raspberry PI, I've began exploring docker compose files and setting them up.

One of the useful resources that I look for to do self-hosting is from
https://hub.docker.com/

One of the amazing things about docker is the folder structure, here I can specify my own directory, making docker generate the files at the mention directories.

Note that this docker compose is for raspberry pi setup, however it should also work for x86 systems as well.

version: '3.1'

services:

  wordpress:
    container_name: wordpress
    image: wordpress
    restart: always
    ports:
      - 9005:80
    environment:
      WORDPRESS_DB_HOST: db
      WORDPRESS_DB_USER: exampleuser
      WORDPRESS_DB_PASSWORD: examplepass
      WORDPRESS_DB_NAME: exampledb
    volumes:
      - wordpress:/var/www/html

  db:
    image: mysql/mysql-server:latest
    restart: always
    environment:
      MYSQL_DATABASE: exampledb
      MYSQL_USER: exampleuser
      MYSQL_PASSWORD: examplepass
      MYSQL_RANDOM_ROOT_PASSWORD: '1'
    volumes:
      - db/var/lib/mysql

volumes:
  wordpress: /opt/containers/wordpress/html #Define your own path
  db: /opt/containers/wordpress/mysql #Define your own path

Traefik as a reverse proxy

Lim Guan Ji — Sat, 02 Jan 2021 08:47:51 +0000

This guide is about sharing how I setup Traefik as a reverse proxy with https connection

1.Setup for apache2-utils to encrypt your password

apt install apach2-utils

In this Docker file, you can change several value to your custom domain needs, the comments briefly explains the usage of the configurations.

Docker-Compose

version: '3'
services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true #Prevents the UID transition while running a set UID binary
    networks:
      - proxy
    ports:
      - 80:80
      - 443:443
    volumes:
      - /etc/localtime:/etc/localtime:ro #Ensure that docker date matches server time
      - /var/run/docker.sock:/var/run/docker.sock:ro 
      - ./data/traefik.yml:/traefik.yml:ro #traefik configuration files
      - ./data/acme.json:/acme.json #to tell traefik to save ssl certs here
    command:
      --api.insecure=true # Enabling insecure api, NOT RECOMMENDED FOR PRODUCTION

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`traefik.domain.com`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.users= admin:@@$apr1@@$buoyPbo.@@$NOlqTVpSHfumf9lOiMYwI1" #Generated password
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`traefik.domain.com`)"
      - "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=http"
      - "traefik.http.routers.traefik-secure.service=api@internal"
networks:
  proxy:
    external: true

api:
  dashboard: true
entryPoints:
  http:
    address: ":80"
  https:
    address: ":443"
providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
certificatesResolvers:
  http:
    acme:
      email: <<email.com>>
      storage: acme.json
      httpChallenge:
        entryPoint: http

Start docker container

docker-compose up -d

Your good to go!!!