nginx-proxy-manager v0.1.0

Networking

Nginx Proxy Manager — a friendly web UI for running Nginx as a reverse proxy with free, automatic Let's Encrypt TLS: add proxy hosts, redirects, and access lists without touching config files. Deployed host-networked (SQLite) with data and certificate volumes.

nomad-pack run nginx-proxy-manager --registry nomploy

…or one line (add registry + run)

curl -fsSL https://packs.nomploy.com/install.sh | sh -s -- nginx-proxy-manager

Needs nomad-pack on PATH. The script only adds the nomploy registry and runs this pack.

Source ↗ Project ↗ ★ 34.5k ⚑ Report an issue

1 task http 80https 443admin 81 2 volumes image jc21/nginx-proxy-manager:latest tracks :latest image bumped 27 days ago

Variables 11

values.hcl

Save as values.hcl, edit, then run:

nomad-pack run nginx-proxy-manager -f values.hcl --registry nomploy

# The name of the Nomad job.
job_name = "nginx-proxy-manager"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The Nginx Proxy Manager container image. Pin a tag in production.
image = "jc21/nginx-proxy-manager:latest"

# Host port for proxied HTTP traffic.
http_port = 80

# Host port for proxied HTTPS traffic.
https_port = 443

# Host port for the admin web UI.
admin_port = 81

# Named volume for NPM config and its SQLite database (/data).
data_volume = "npm_data"

# Named volume for issued TLS certificates (/etc/letsencrypt).
letsencrypt_volume = "npm_letsencrypt"

# Placement constraints. Pin to the node holding the volumes. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# The task resources.
resources = {
    cpu    = 500
    memory = 512
  }

Name	Type	Default	Description
job_name	string	"nginx-proxy-manager"	The name of the Nomad job.
namespace	string	"default"	The Nomad namespace to deploy into.
datacenters	list	["*"]	The datacenters to deploy to.
image	string	"jc21/nginx-proxy-manager:latest"	The Nginx Proxy Manager container image. Pin a tag in production.
http_port	number	80	Host port for proxied HTTP traffic.
https_port	number	443	Host port for proxied HTTPS traffic.
admin_port	number	81	Host port for the admin web UI.
data_volume	string	"npm_data"	Named volume for NPM config and its SQLite database (/data).
letsencrypt_volume	string	"npm_letsencrypt"	Named volume for issued TLS certificates (/etc/letsencrypt).
constraints	list	[]	Placement constraints. Pin to the node holding the volumes. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
resources	object	{ cpu = 500 memory = 512 }	The task resources.

Back up this pack

This pack stores data in 2 Docker named volumes: npm_datanpm_letsencrypt

restic

# Run on the node hosting this pack. Point restic at your repo first:
#   export RESTIC_REPOSITORY="s3:https://<account>.r2.cloudflarestorage.com/<bucket>"
#   export RESTIC_PASSWORD="<repo-password>"
#   export AWS_ACCESS_KEY_ID=<key>  AWS_SECRET_ACCESS_KEY=<secret>
restic backup \
  /var/lib/docker/volumes/npm_data/_data \
  /var/lib/docker/volumes/npm_letsencrypt/_data

rclone (sync to S3/R2)

rclone sync /var/lib/docker/volumes/npm_data/_data backup:<bucket>/npm_data
rclone sync /var/lib/docker/volumes/npm_letsencrypt/_data backup:<bucket>/npm_letsencrypt

Paths assume the default Docker volume location (/var/lib/docker/volumes). Restore by stopping the job, restoring files into the same volume, and re-running the pack.

Readme

nginx-proxy-manager

Nginx Proxy Manager — a friendly web UI for running Nginx as a reverse proxy with free, automatic Let's Encrypt TLS. Add proxy hosts, redirects, streams, and access lists without editing config files.

Host-networked, SQLite-backed, with data and certificate volumes.

Deploy

nomad-pack registry add nomploy https://github.com/Nomploy/nomad-packs
nomad-pack run nginx-proxy-manager --registry=nomploy

Configure

Variable	Default	Description
`http_port` / `https_port`	`80` / `443`	Proxied HTTP/HTTPS.
`admin_port`	`81`	Admin web UI.
`data_volume`	`npm_data`	`/data` — config + SQLite.
`letsencrypt_volume`	`npm_letsencrypt`	`/etc/letsencrypt` — certificates.
`image`	`jc21/nginx-proxy-manager:latest`	Image. Pin a tag in production.
`resources`	`{ cpu = 500, memory = 512 }`	Task resources.

Default login is admin@example.com / changeme — change it on first login. For Let's Encrypt, the domain's DNS must point at this node and ports 80/443 must be internet-reachable. Note: ports 80/443 overlap the caddy pack — run only one proxy per node. Pin with constraints.