Nginx Proxy Manager — a friendly web UI for running Nginx as a reverse proxy with free, automatic Let's Encrypt TLS: add proxy hosts, redirects, and access lists without touching config files. Deployed host-networked (SQLite) with data and certificate volumes.
Save as values.hcl, edit, then run:
# The name of the Nomad job.
job_name = "nginx-proxy-manager"
# The Nomad namespace to deploy into.
namespace = "default"
# The datacenters to deploy to.
datacenters = ["*"]
# The Nginx Proxy Manager container image. Pin a tag in production.
image = "jc21/nginx-proxy-manager:latest"
# Host port for proxied HTTP traffic.
http_port = 80
# Host port for proxied HTTPS traffic.
https_port = 443
# Host port for the admin web UI.
admin_port = 81
# Named volume for NPM config and its SQLite database (/data).
data_volume = "npm_data"
# Named volume for issued TLS certificates (/etc/letsencrypt).
letsencrypt_volume = "npm_letsencrypt"
# Placement constraints. Pin to the node holding the volumes. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []
# The task resources.
resources = {
cpu = 500
memory = 512
}
| Name | Type | Default | Description |
|---|---|---|---|
| job_name | string | "nginx-proxy-manager" | The name of the Nomad job. |
| namespace | string | "default" | The Nomad namespace to deploy into. |
| datacenters | list | ["*"] | The datacenters to deploy to. |
| image | string | "jc21/nginx-proxy-manager:latest" | The Nginx Proxy Manager container image. Pin a tag in production. |
| http_port | number | 80 | Host port for proxied HTTP traffic. |
| https_port | number | 443 | Host port for proxied HTTPS traffic. |
| admin_port | number | 81 | Host port for the admin web UI. |
| data_volume | string | "npm_data" | Named volume for NPM config and its SQLite database (/data). |
| letsencrypt_volume | string | "npm_letsencrypt" | Named volume for issued TLS certificates (/etc/letsencrypt). |
| constraints | list | [] | Placement constraints. Pin to the node holding the volumes. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true". |
| resources | object | {
cpu = 500
memory = 512
} | The task resources. |
No variables match.
Nginx Proxy Manager — a friendly web UI for running Nginx as a reverse proxy with free, automatic Let's Encrypt TLS. Add proxy hosts, redirects, streams, and access lists without editing config files.
Host-networked, SQLite-backed, with data and certificate volumes.
nomad-pack registry add nomploy https://github.com/Nomploy/nomad-packs
nomad-pack run nginx-proxy-manager --registry=nomploy
| Variable | Default | Description |
|---|---|---|
http_port / https_port |
80 / 443 |
Proxied HTTP/HTTPS. |
admin_port |
81 |
Admin web UI. |
data_volume |
npm_data |
/data — config + SQLite. |
letsencrypt_volume |
npm_letsencrypt |
/etc/letsencrypt — certificates. |
image |
jc21/nginx-proxy-manager:latest |
Image. Pin a tag in production. |
resources |
{ cpu = 500, memory = 512 } |
Task resources. |
Default login is admin@example.com / changeme — change it on first login. For Let's Encrypt,
the domain's DNS must point at this node and ports 80/443 must be internet-reachable. Note: ports
80/443 overlap the caddy pack — run only one proxy per node. Pin with constraints.