Thirding a reverse proxy. Probably Nginx Proxy Manager (NPM) is the easiest reverse proxy to get started with, if you don’t want to deal with plain nginx config files
Comment on Vaultwarden using Docker Compose with existing Certificates
dandroid@dandroid.app 9 months ago
Seconding a reverse proxy. Once you have it set up, it’s trivial to add a subdomain, forward it to your internal port that your container is exposing, then use certbot or whatever to get a new certificate for that subdomain.
I just use apache because I heavily use it for work, so I already know it well. But lots of people swear by nginx as well. There are lots of other options as well.
klangcola@reddthat.com 9 months ago
lemmyvore@feddit.nl 9 months ago
No need to get a certificate for ever subdomain, you can get a wildcard cert for *.your. domain.
dandroid@dandroid.app 9 months ago
True. I did that for one of my domains, but it was really quite annoying to do with certbot, as you needed some sort of plugin.
Kangie@lemmy.srcfiles.zip 9 months ago
It’s fine with Let’sEncrypt via the DNS01 challenge; my lab typically only uses one wildcard certificate for all the services there unless I have a specific need to generate an indovidual cert for a service.