mirror of
				https://github.com/NginxProxyManager/nginx-proxy-manager.git
				synced 2025-11-04 01:15:14 +00:00 
			
		
		
		
	Ported #2582 to v3
This commit is contained in:
		@@ -12,7 +12,7 @@ require (
 | 
				
			|||||||
	github.com/go-chi/chi v4.1.2+incompatible
 | 
						github.com/go-chi/chi v4.1.2+incompatible
 | 
				
			||||||
	github.com/go-chi/cors v1.2.1
 | 
						github.com/go-chi/cors v1.2.1
 | 
				
			||||||
	github.com/go-chi/jwtauth v4.0.4+incompatible
 | 
						github.com/go-chi/jwtauth v4.0.4+incompatible
 | 
				
			||||||
	github.com/jc21/go-sse v0.0.0-20230307041911-8ea9bdc44a58
 | 
						github.com/jc21/go-sse v0.0.0-20230307071053-2e6b1dbcb7ec
 | 
				
			||||||
	github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760
 | 
						github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760
 | 
				
			||||||
	github.com/jmoiron/sqlx v1.3.5
 | 
						github.com/jmoiron/sqlx v1.3.5
 | 
				
			||||||
	github.com/mattn/go-sqlite3 v1.14.16
 | 
						github.com/mattn/go-sqlite3 v1.14.16
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -33,6 +33,8 @@ github.com/jc21/go-sse v0.0.0-20230307015818-b2783ddda573 h1:aaRu9mFSjxNfbXWVe7M
 | 
				
			|||||||
github.com/jc21/go-sse v0.0.0-20230307015818-b2783ddda573/go.mod h1:4v5Xmm0eYuaWqKJ63XUV5YfQPoxtId3DgDytbnWhi+s=
 | 
					github.com/jc21/go-sse v0.0.0-20230307015818-b2783ddda573/go.mod h1:4v5Xmm0eYuaWqKJ63XUV5YfQPoxtId3DgDytbnWhi+s=
 | 
				
			||||||
github.com/jc21/go-sse v0.0.0-20230307041911-8ea9bdc44a58 h1:WSD0YdEuFPZHIe8hkAjxoAEWZnzieAiLg3zw28EVf80=
 | 
					github.com/jc21/go-sse v0.0.0-20230307041911-8ea9bdc44a58 h1:WSD0YdEuFPZHIe8hkAjxoAEWZnzieAiLg3zw28EVf80=
 | 
				
			||||||
github.com/jc21/go-sse v0.0.0-20230307041911-8ea9bdc44a58/go.mod h1:4v5Xmm0eYuaWqKJ63XUV5YfQPoxtId3DgDytbnWhi+s=
 | 
					github.com/jc21/go-sse v0.0.0-20230307041911-8ea9bdc44a58/go.mod h1:4v5Xmm0eYuaWqKJ63XUV5YfQPoxtId3DgDytbnWhi+s=
 | 
				
			||||||
 | 
					github.com/jc21/go-sse v0.0.0-20230307071053-2e6b1dbcb7ec h1:KKntwkZlM2w/88QiDyAeZ4th8grqtituzMW8qyapYzc=
 | 
				
			||||||
 | 
					github.com/jc21/go-sse v0.0.0-20230307071053-2e6b1dbcb7ec/go.mod h1:4v5Xmm0eYuaWqKJ63XUV5YfQPoxtId3DgDytbnWhi+s=
 | 
				
			||||||
github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760 h1:7wxq2DIgtO36KLrFz1RldysO0WVvcYsD49G9tyAs01k=
 | 
					github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760 h1:7wxq2DIgtO36KLrFz1RldysO0WVvcYsD49G9tyAs01k=
 | 
				
			||||||
github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760/go.mod h1:yIq2t51OJgVsdRlPY68NAnyVdBH0kYXxDTFtUxOap80=
 | 
					github.com/jc21/jsref v0.0.0-20210608024405-a97debfc4760/go.mod h1:yIq2t51OJgVsdRlPY68NAnyVdBH0kYXxDTFtUxOap80=
 | 
				
			||||||
github.com/jmoiron/sqlx v1.3.5 h1:vFFPA71p1o5gAeqtEAwLU4dnX2napprKtHr7PYIcN3g=
 | 
					github.com/jmoiron/sqlx v1.3.5 h1:vFFPA71p1o5gAeqtEAwLU4dnX2napprKtHr7PYIcN3g=
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -70,18 +70,6 @@ RUN rm -rf /etc/services.d/frontend \
 | 
				
			|||||||
	/tmp/* \
 | 
						/tmp/* \
 | 
				
			||||||
	/var/lib/dpkg/status-old
 | 
						/var/lib/dpkg/status-old
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Dummy cert
 | 
					 | 
				
			||||||
RUN openssl req \
 | 
					 | 
				
			||||||
	-new \
 | 
					 | 
				
			||||||
	-newkey rsa:2048 \
 | 
					 | 
				
			||||||
	-days 3650 \
 | 
					 | 
				
			||||||
	-nodes \
 | 
					 | 
				
			||||||
	-x509 \
 | 
					 | 
				
			||||||
	-subj '/O=Nginx Proxy Manager/OU=Dummy Certificate/CN=localhost' \
 | 
					 | 
				
			||||||
	-keyout /etc/ssl/certs/dummykey.pem \
 | 
					 | 
				
			||||||
	-out /etc/ssl/certs/dummycert.pem \
 | 
					 | 
				
			||||||
	&& chmod +r /etc/ssl/certs/dummykey.pem /etc/ssl/certs/dummycert.pem
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
VOLUME /data
 | 
					VOLUME /data
 | 
				
			||||||
 | 
					
 | 
				
			||||||
CMD [ "/init" ]
 | 
					CMD [ "/init" ]
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -51,18 +51,6 @@ RUN chown -R 1000:1000 /opt/go
 | 
				
			|||||||
COPY --from=pebbleca /test/certs/pebble.minica.pem /etc/ssl/certs/pebble.minica.pem
 | 
					COPY --from=pebbleca /test/certs/pebble.minica.pem /etc/ssl/certs/pebble.minica.pem
 | 
				
			||||||
COPY --from=testca /home/step/certs/root_ca.crt /etc/ssl/certs/NginxProxyManager.crt
 | 
					COPY --from=testca /home/step/certs/root_ca.crt /etc/ssl/certs/NginxProxyManager.crt
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Dummy cert
 | 
					 | 
				
			||||||
RUN openssl req \
 | 
					 | 
				
			||||||
	-new \
 | 
					 | 
				
			||||||
	-newkey rsa:2048 \
 | 
					 | 
				
			||||||
	-days 3650 \
 | 
					 | 
				
			||||||
	-nodes \
 | 
					 | 
				
			||||||
	-x509 \
 | 
					 | 
				
			||||||
	-subj '/O=Nginx Proxy Manager/OU=Dummy Certificate/CN=localhost' \
 | 
					 | 
				
			||||||
	-keyout /etc/ssl/certs/dummykey.pem \
 | 
					 | 
				
			||||||
	-out /etc/ssl/certs/dummycert.pem \
 | 
					 | 
				
			||||||
	&& chmod +r /etc/ssl/certs/dummykey.pem /etc/ssl/certs/dummycert.pem
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
EXPOSE 80
 | 
					EXPOSE 80
 | 
				
			||||||
CMD [ "/init" ]
 | 
					CMD [ "/init" ]
 | 
				
			||||||
HEALTHCHECK --interval=15s --timeout=3s CMD curl -f http://127.0.0.1:81/api || exit 1
 | 
					HEALTHCHECK --interval=15s --timeout=3s CMD curl -f http://127.0.0.1:81/api || exit 1
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -18,10 +18,6 @@ server {
 | 
				
			|||||||
	server_name localhost;
 | 
						server_name localhost;
 | 
				
			||||||
	include conf.d/include/block-exploits.conf;
 | 
						include conf.d/include/block-exploits.conf;
 | 
				
			||||||
	access_log /data/logs/default.log proxy;
 | 
						access_log /data/logs/default.log proxy;
 | 
				
			||||||
 | 
						ssl_reject_handshake on;
 | 
				
			||||||
	ssl_certificate /etc/ssl/certs/dummycert.pem;
 | 
					 | 
				
			||||||
	ssl_certificate_key /etc/ssl/certs/dummykey.pem;
 | 
					 | 
				
			||||||
	include conf.d/include/ssl-ciphers.conf;
 | 
					 | 
				
			||||||
 | 
					 | 
				
			||||||
	return 444;
 | 
						return 444;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user