carlopellegrini
Joined 8 years ago
Karma
85
Submissions
6
Member since
Sep 13
Recent submissions
Comment · 8 years ago
Comment · 8 years ago
I was a bit worried too about exposing the docker socket, even to a well trusted image and even if it seems it'a a widely adopted practice for such automatic configurations.
Fortunately ducaale suggested https://hub.docker.com/r/steveltn/https-portal/.
I adapted the site and will publish a follow-up about using this image for nginx - let's encrypt configuration.
Comment · 8 years ago
The fact that everything is done with a single compose file is the reason I set it up like this (mostly because it was a good learning opportunity).
I'm still trying to find a way around the necessity to expose the docker socket to configure the proxy though.
https://www.archij.com/improving-the-blog-security/