{"id":18885381,"url":"https://github.com/redisinsight/redisinsight-reverse-proxy","last_synced_at":"2025-04-14T21:30:56.734Z","repository":{"id":56706613,"uuid":"486661332","full_name":"RedisInsight/RedisInsight-reverse-proxy","owner":"RedisInsight","description":null,"archived":false,"fork":false,"pushed_at":"2024-06-24T08:59:43.000Z","size":81,"stargazers_count":8,"open_issues_count":2,"forks_count":5,"subscribers_count":4,"default_branch":"main","last_synced_at":"2024-10-11T23:33:09.483Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RedisInsight.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2022-04-28T16:01:48.000Z","updated_at":"2024-06-28T06:02:19.000Z","dependencies_parsed_at":"2024-04-09T11:03:49.937Z","dependency_job_id":null,"html_url":"https://github.com/RedisInsight/RedisInsight-reverse-proxy","commit_stats":null,"previous_names":["redis-insight/redisinsight-reverse-proxy","redisinsight/redisinsight-reverse-proxy"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedisInsight%2FRedisInsight-reverse-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedisInsight%2FRedisInsight-reverse-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedisInsight%2FRedisInsight-reverse-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedisInsight%2FRedisInsight-reverse-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RedisInsight","download_url":"https://codeload.github.com/RedisInsight/RedisInsight-reverse-proxy/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223644877,"owners_count":17178816,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-08T07:18:14.744Z","updated_at":"2025-04-14T21:30:56.727Z","avatar_url":"https://github.com/RedisInsight.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Redis-Insight-reverse-proxy\n\nSample setup to access Redis Insight behind a reverse proxy. Template project to test different scenarios.\nPlease notice the following points:\n\n- this is just a skeleton to provide an example\n- need to add any custom plugin to integrate Envoy with LDAP\n- there is no logout in this example\n- TLS/credentials are passed unencrypted\n\n\n## Envoy\n\n### Steps\n\n```bash\ncd envoy\ndocker-compose up\n```\n\nThe compose file starts the following containers:\n- redisinsight\n- envoy\n- redis-stack\n\n\nJust being used as a reverse proxy for now. You can access Redis Insight at `http://localhost:10000`. Envoy admin portal can be viewed at `http://localhost:8005`.\n\n\u003e Envoy provides [external autorization](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/ext_authz/v3/ext_authz.proto). Need to find a service that implements this protocol for LDAP/AD.\n\n## NGINX Basic Auth\n\nThe basic auth configuration is stored in `nginx-basicauth` folder. NGINX configured as a  reverse proxy with [basic auth](https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/) , user will be prompted for a username and password.\n\n### Steps:\n```\ncd nginx-basicauth\ndocker-compose up\n```\n\nThe compose file starts the following containers:\n- redisinsight\n- nginx reverse proxy\n- redis-stack\n\n\nYou can access Redis Insight at `http://localhost:9000` username and password is `redis` and `password`.\n\nThe setup has the following environment variables.\n\n| Name             | container           |\n|------------------|:-------------------:|\n| `RIPORT`         | Redis Insight port   |\n| `NGINX_PORT`     | Reverse proxy URL   |\n| `BASIC_USERNAME` | Proxy auth username |\n| `BASIC_PASSWORD` | Proxy auth password |\n\n#### Example\n```bash\nNGINX_PORT=10000 docker-compose up # runs reverse proxy at port 10000\n```\n\n#### Note\nIf you are facing \"Operation not permitted\" on MacOs. Follow the steps mentioned here: https://stackoverflow.com/questions/58482352/operation-not-permitted-from-docker-container-logged-as-root\n\n## NGINX LDAP/AD\n\nThe NGINX LDAP auth configuration is stored in the `nginx-ldap` folder.\n\n### Steps (from project root)\n\n```\ncd nginx-ldap\ndocker-compose up\n```\n\nThe compose file starts the folllowing containers:\n- ldap server\n- nginx-ldap authentication daemon\n- nginx reverse proxy with LDAP support\n- redisinsight\n- redis-stack\n- ldap users seed\n\nYou can access Redis Insight at `http://localhost:12000` and use `adamb` or `danj` with password `ldap123`\n\nMore details for LDAP setup can be found [here](https://github.com/nginxinc/nginx-ldap-auth). \n\n\u003eIMPORTANT according to [bitnami/nginx-ldap-auth-daemon](https://hub.docker.com/r/bitnami/nginx-ldap-auth-daemon) the image and project is deperecated.\n\nThe setup has the following environment variables.\n\n| Name             | container           |\n|------------------|:-------------------:|\n| `RIPORT`         | Redis Insight port   |\n| `NGINX_PORT`     | Reverse proxy URL   |\n\n#### Example\n```bash\nNGINX_PORT=10000 docker-compose up # runs reverse proxy at port 10000\n```\n\n#### Don't seed users automatically (Optional)\n\nThe users are added automatically by a seed container. In order to not perform this operation, you need to comment `ol-seed` service in [docker-compose file](nginx-ldap/docker-compose.yml).\n\n#### Verify LDAP users for sanity check (Optional)\n\nIf you want to verify LDAP users run `docker-compose --profile verify run ol-verify`.\n\nThis verification service runs a prompt where you can enter the username and password.\n\n\n### Verify LDAP manually from host for sanity check (Optional)\n\nAll the users have the same password: `ldap123`\n\nYou can view the users in the nginx-ldap/data/ldif/users.ldif file.\n\nYou can also verify LDAP using LDAP utils. These utils are in the openldap container and also are bundled with MacOS.\n\nFind user  adamb\n\n`ldapsearch -x -H ldap://localhost:389  -w ldap123 -D \"cn=admin,dc=ldap-demo,dc=test\" -b ou=users,dc=ldap-demo,dc=test \"uid=adamb\"`\n\nFind all groups user is member of using user's DN\n\n`ldapsearch -x -H ldap://localhost:389  -w ldap123 -D \"cn=admin,dc=ldap-demo,dc=test\" -b ou=groups,dc=ldap-demo,dc=test \"uniqueMember=cn=Adam Barr,ou=users,dc=ldap-demo,dc=test\"` \n\nVerify user can bind using his credentials\n\n`ldapwhoami -vvvv -x  -H ldap://localhost:389  -w ldap123 -D \"cn=Adam Barr,ou=users,dc=ldap-demo,dc=test\"`\n\nYou can also use [Apache LDAP Studio](https://directory.apache.org/studio/) to browse ldap entries or use `ldapsearch` to get all the entries.\n\n`ldapsearch -x -H ldap://localhost:389  -w ldap123 -D \"cn=admin,dc=ldap-demo,dc=test\" -b dc=ldap-demo,dc=test \"*\"`\n\n#### Note\nIf you are facing \"Operation not permitted\" on MacOs. Follow the steps mentioned here: https://stackoverflow.com/questions/58482352/operation-not-permitted-from-docker-container-logged-as-root\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredisinsight%2Fredisinsight-reverse-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fredisinsight%2Fredisinsight-reverse-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredisinsight%2Fredisinsight-reverse-proxy/lists"}