From 7d811fede0bd286942d019c10d53503dfc7a94bb Mon Sep 17 00:00:00 2001 From: boris Date: Tue, 23 Sep 2025 19:08:05 +0100 Subject: [PATCH] Added SETUP.md --- SETUP.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 SETUP.md diff --git a/SETUP.md b/SETUP.md new file mode 100644 index 0000000..6633b8f --- /dev/null +++ b/SETUP.md @@ -0,0 +1,16 @@ +# NGINX - External Proxy + +For setups behind an external reverse proxy (heavily recommended), using a local CA and self-signed certificates is not required, but also recommended. + +After installing `mkcert` through your system package manager: + +```bash +mkcert -install +mkcert abc.domain.xyz, bcd.domain.xyz +mv domain.xyz+X-key.pem nginx/certs/key.pem +mv domain.xyz.pem nginx/certs/certificate.pem +``` + +NGINX will find these certificates automatically and use them when proxying the application. Unless you know what you are doing, editing files under `nginx/configs/` is not recommended. + +If preferred, NGINX can be used as a reverse proxy, however an additional `certbot/certbot:latest` container would be required unless other valid SSL certificates are provided under `nginx/certs`. \ No newline at end of file