Hacker News new | ask | show | jobs
by penultimatename 1483 days ago
I stopped trusting this application when I realized my some of my self hosted services were exposed without authentication, despite the configuration being set. Apparently there had been an bug open for months that authentication didn't work.

I accept it's my fault for not re-testing this often, but what a huge issue. It's vanilla Nginx or Caddy from here on out, it's not worth introducing a third-party security risk.
3 comments
KMnO4 1483 days ago
I have a bug where every time my server restarts and Nginx Proxy Manager starts up, it gives all my proxy hosts incorrect SSL certificates. In order to get my services working again I have to open NPM, manually open each host, and press edit, and (without making changes), press save.

This bug has existed for a year and a half in Github without any response from the developers.

As much as I like NPM, I need to move onto something more reliable.

link
jonasal 1483 days ago
I also prefer to run Nginx as vanilla as possible, but having automatic renewal of certificates is something which is really nice. I looked around at some of the more popular solutions, but didn't like the mounting of the docker socket required by [acme-companion][1], or the lack of bootstrapping capability of [nginx-certbot][2], so I made [something][3] that solved both of those issues. A self contained Docker container that is able to populate the certificate request form what you write in your Nginx configuration files. Please check it out if you have time, and I will gladly take any feedback if you have any!

[1]: https://github.com/nginx-proxy/acme-companion [2]: https://github.com/wmnnd/nginx-certbot [3]: https://github.com/JonasAlfredsson/docker-nginx-certbot

link
zrail 1483 days ago
Mine just stops renewing certificates so I stopped fighting it. Haven't replaced it with vanilla Nginx yet but that's a project on my todo list.
link
metadat 1483 days ago
You might also consider using the fully OSS Traefik for a load balancer and proxy. It arrives to be friendly and approachable.

https://github.com/traefik/traefik

link
jacooper 1483 days ago
You can try nginx-proxy, its similar to trafeik but based in nginx and a bit easier.

https://github.com/nginx-proxy/nginx-proxy

link