nginx-proxy/docker-letsencrypt-nginx-proxy-companion
Docker Letsencrypt Nginx Proxy Companion
This project is an automated SSL certificate manager and orchestrator for Nginx proxy configurations. It functions as an ACME protocol client that handles the request, issuance, and renewal of security certificates for web services running in containers.
The system monitors Docker container lifecycle events to automatically provision certificates based on assigned hostnames. It automates the full certificate lifecycle, including domain ownership validation and the issuance of specialized wildcard or multi-domain certificates.
The tool manages security through both HTTP and DNS challenge resolution and persists certificates in local volumes. It ensures continuous encrypted connections by triggering automatic configuration reloads of the Nginx server whenever certificates are generated or updated.
Features
- SSL Certificate Managers - Automates the full lifecycle of obtaining and renewing SSL certificates for containerized services.
- SSL Provisioning Orchestrators - Monitors Docker containers to automatically provision security certificates based on hostnames.
- Containerized Reverse Proxy Infrastructure - Orchestrates a scalable network of containers with integrated automated domain discovery and security.
- Reverse Proxy Configurations - Manages Nginx reverse proxy configurations to route traffic and handle SSL termination.
- ACME Clients - Implements the ACME protocol to automate the request and renewal of security certificates.
- ACME Protocol Implementations - Provides the core logic for interacting with certificate authorities via the ACME protocol.
- Certificate Lifecycle Management - Manages the complete lifecycle of security certificates from issuance through renewal.
- SSL Certificate Automation - Automates the generation and renewal of security certificates using the ACME protocol.
- Dynamic Configuration Reloading - Triggers Nginx configuration reloads to apply updated certificates without service interruption.
- Docker Socket Orchestrators - Monitors the Docker socket to trigger certificate provisioning based on container lifecycle events.
- ACME Challenge Servers - Intercepts HTTP requests to serve tokens required for ACME HTTP-01 domain validation.
- Automated Certificate Reloaders - Automatically refreshes Nginx server blocks when new security certificates are generated.
- Domain Validation Protocols - Verifies domain ownership using HTTP and DNS challenges to satisfy certificate authority requirements.
- Wildcard Certificate Issuers - Supports the issuance of wildcard and multi-domain certificates to secure multiple hostnames.
- DNS-01 Challenge Implementations - Provides DNS-01 challenge resolution to verify domain control for wildcard certificates.
- Networking And Proxies - Automated Let's Encrypt certificate management for Nginx.
