Mastodawn

Best reverse proxy with ACME to run in docker

Best reverse proxy with ACME to run in docker - Lemmy.World

I’ve been self hosting traditionally in debian, but I would like to be able to add services easier using docker. As such, I’m looking to move to a container based architecture. One place I struggle is that I can’t seem to find a good container where the default image supports ACME to support Let’s encrypt for automatic cert renewal. For Nginx, I would have you build my container. HAproxy ACME support seems to be a shell script. Any suggestions?

Show thread

stratself

Caddy supports the HTTP-01 and TLS-ALPN-01 challenges by default, you just need to expose 80/443 and it just works. But if you want to use the DNS-01 challenge you’d need to build it with a plugin of your DNS provider.

Traefik supports all 3 challenges equally ootb, with a wide range of DNS providers. But it is a bit harder to configure and doesn’t support being a web server.

GitHub - go-acme/lego: Let's Encrypt/ACME client and library written in Go

Let's Encrypt/ACME client and library written in Go - go-acme/lego

GitHub