Docker Swag | Awesome Repository

This project is a Docker-based web gateway and Nginx reverse proxy manager. It functions as a containerized network edge designed to route incoming HTTP and HTTPS traffic to backend services using subdomains and subfolders.

The system automates the procurement and renewal of Let's Encrypt SSL certificates via the ACME protocol and various DNS plugins. It includes a mechanism to export and share these certificates through persistent volumes so other containers can utilize the same encryption keys.

Security is handled through a combination of server intrusion prevention, using Fail2Ban to monitor logs and ban malicious IP addresses, and layered authentication middleware. Access to resources can be restricted using local password files, LDAP, or external identity providers, while HTTP traffic is automatically redirected to HTTPS.

The deployment is managed via container orchestration, supporting read-only filesystem modes and template-based proxy routing for internal network addresses.

Features

Reverse Proxy Orchestrators - Functions as a managed reverse proxy orchestrator directing traffic to backend services via Nginx.
Reverse Proxies - Acts as a containerized network edge that routes incoming traffic to backend services using subdomains and subfolders.
Template-Based Routing - Uses pre-defined templates to map subdomains and subfolders to internal container addresses.
Automated TLS Reverse Proxies - Provides a containerized Nginx reverse proxy with automated TLS certificate management.

Features

Reverse Proxy Orchestrators - Functions as a managed reverse proxy orchestrator directing traffic to backend services via Nginx.
Reverse Proxies - Acts as a containerized network edge that routes incoming traffic to backend services using subdomains and subfolders.
Template-Based Routing - Uses pre-defined templates to map subdomains and subfolders to internal container addresses.
Automated TLS Reverse Proxies - Provides a containerized Nginx reverse proxy with automated TLS certificate management.

The deployment is managed via container orchestration, supporting read-only filesystem modes and template-based proxy routing for internal network addresses.