{"id":13550035,"url":"https://github.com/fsouza/docker-ssl-proxy","last_synced_at":"2025-08-23T15:06:51.770Z","repository":{"id":14422115,"uuid":"61309579","full_name":"fsouza/docker-ssl-proxy","owner":"fsouza","description":" Builds a docker image that proxies SSL calls to another docker container (fork of bombbomb/docker-ssl-proxy)","archived":false,"fork":false,"pushed_at":"2024-10-08T12:37:38.000Z","size":238,"stargazers_count":43,"open_issues_count":2,"forks_count":20,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-10-12T18:52:29.867Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-2-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fsouza.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-16T16:34:07.000Z","updated_at":"2024-10-08T12:37:39.000Z","dependencies_parsed_at":"2023-11-18T05:23:54.159Z","dependency_job_id":"53c72611-7543-44de-89ff-afa20bcb94cd","html_url":"https://github.com/fsouza/docker-ssl-proxy","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fsouza%2Fdocker-ssl-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fsouza%2Fdocker-ssl-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fsouza%2Fdocker-ssl-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fsouza%2Fdocker-ssl-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fsouza","download_url":"https://codeload.github.com/fsouza/docker-ssl-proxy/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225106472,"owners_count":17421804,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T12:01:28.304Z","updated_at":"2024-11-18T00:06:47.639Z","avatar_url":"https://github.com/fsouza.png","language":"Shell","funding_links":[],"categories":["Shell"],"sub_categories":[],"readme":"# docker-ssl-proxy\n\nBuilds a basic nginx server that proxies incoming SSL calls to a target host\n(usually another Docker container).\n\n## Environment variables\n\nThe following environment variables configure nginx and openssl:\n\n- ``DOMAIN``: domain in the SSL certificate (default value: ``www.example.com``)\n- ``ALT_NAMES``: optional comma-separated list of alternative domain names (e.g: ``example.net,example.tv``)\n- ``TARGET_PORT``: target port for the reverse proxy (default value: ``80``)\n- ``TARGET_HOST``: target host for the reverse proxy (default value: ``proxyapp``)\n- ``TARGET_HOST_HEADER``: value to be used as the Host header when sending\n  requests to the target host (defaults to the value of ``$TARGET_HOST``)\n- ``TARGET_FORWARDED_HOST_HEADER``: value to be used as the X-Forwarded-Host header when sending\n  requests to the target host (default value: ``$host``)\n- ``CLIENT_MAX_BODY_SIZE``: maximum size of client uploads (default value: ``20M``)\n- ``SSL_PORT``: port ngnix SSL proxy listens on\n\n## Certificates and CA location\n\nThe SSL certificate is generated using a own-ROOT-ca that is available in the\ndirectory ``/etc/nginx/ca``, you may use Docker volumes to share the CAs with\nother containers, so they can trust the installed certificate.\n\nYour container may initialise faster than docker-ssl-proxy; therefore your\nstart-up script should wait until the CA-cert has a non-zero size before\nattempting to use it.\n\n### Import CA cert into container\nExample for Debian / Ubuntu, assuming volume mount of `./https-proxy-ca:/etc/ssl/shared-ca`:\n```\ncp /etc/ssl/shared-ca/rootCA.crt /usr/local/share/ca-certificates/\nupdate-ca-certificates\n```\n\n### Import CA cert onto workstation\n\nYou can also install the shared CA cert on your workstation to automatically\ntrust all of your docker-ssl-proxy services in your browser, without having to\noverride security warnings each time you visit or restart the services.\n\nExample for Mac OSX:\n```\nsudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain https-proxy-ca/rootCA.crt\n```\n\n## Using own Certificate\n\nYou can use existing SSL certificates for your ``DOMAIN``\nby connecting an volume onto ``/etc/nginx/certs`` with following files inside:\n\n- ``key.pem``: private key file\n- ``cert.pem``: certificate file\n\nThe certificate generator will check on existing ``key.pem`` and abort.\n\n## Docker Hub Image\n\nYou can get the publicly available docker image at\n[fsouza/docker-ssl-proxy](https://registry.hub.docker.com/r/fsouza/docker-ssl-proxy/).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffsouza%2Fdocker-ssl-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffsouza%2Fdocker-ssl-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffsouza%2Fdocker-ssl-proxy/lists"}