diff --git a/docker-compose/authelia/README.md b/docker-compose/authelia/README.md index c53c72d..2866b29 100644 --- a/docker-compose/authelia/README.md +++ b/docker-compose/authelia/README.md @@ -1 +1 @@ -# TODO: ... \ No newline at end of file +TODO: #14 Insert Authelia Readme \ No newline at end of file diff --git a/docker-compose/grafana/README.md b/docker-compose/grafana/README.md index 86fec38..2de99d4 100644 --- a/docker-compose/grafana/README.md +++ b/docker-compose/grafana/README.md @@ -18,7 +18,7 @@ It's not secure to expose Grafana via the HTTP protocol. ### Use a Reverse Proxy -- [] Use a Reverse Proxy to securely expose administrative services. +- [ ] Use a Reverse Proxy to securely expose administrative services. # Additional Referfences diff --git a/docker-compose/influxdb/README.md b/docker-compose/influxdb/README.md index f362259..c1c442b 100644 --- a/docker-compose/influxdb/README.md +++ b/docker-compose/influxdb/README.md @@ -18,14 +18,14 @@ It's not secure to expose InfluxDB via the HTTP protocol. Follow these steps to ### (Option 1): Upload custom certificates -TODO: Not tested in Docker-Compose... +TODO: #15 Test Docker-Compose for InfluxDB2 - [ ] Run the container with tls parameters `influxd --tls-cert=/etc/ssl/cert.pem --tls-key=/etc/ssl/cert-key.pem` ### (Option 2): Use a Reverse Proxy -- [] Use a Reverse Proxy to securely expose administrative services. +- [ ] Use a Reverse Proxy to securely expose administrative services. # Additional Referfences diff --git a/docker-compose/nginxproxymanager/README.md b/docker-compose/nginxproxymanager/README.md new file mode 100644 index 0000000..1309e35 --- /dev/null +++ b/docker-compose/nginxproxymanager/README.md @@ -0,0 +1,27 @@ +# Installation + +## Deployment + +Copy the `docker-compose.yml` template into your project folder and start the container. + +## Configuration + +Visit the Nginxproxymanager Web Interface `http://localhost:81`, and login with Nginxproxymanager's default username `admin@example.com` and password: `changeme`. + +*For more info visit:* [Official Nginxproxymanager Installation Documentation](https://nginxproxymanager.com/guide/) + +# Best-Practices & Post-Installation + +## Disable HTTP + +It's not secure to expose Nginxproxymanager via the HTTP protocol. Follow these steps to enable HTTPS only. + +### Don't expose Nginxproxymanager's UI on port 81 + +- [ ] Add a Proxy Host for Nginxproxymanager's WebUI to target `127.0.0.1:81` +- [ ] Remove port `:81` from the `docker-compose` file + + +# Additional Referfences + +[Official Nginxproxymanager Installation Documentation](https://nginxproxymanager.com/guide/) \ No newline at end of file diff --git a/docker-compose/portainer/README.md b/docker-compose/portainer/README.md index 5670fde..dca9132 100644 --- a/docker-compose/portainer/README.md +++ b/docker-compose/portainer/README.md @@ -39,7 +39,7 @@ It's not secure to expose Portainer via the HTTP protocol. Follow these steps to ### (Option 2): Use a Reverse Proxy -- [] Use a Reverse Proxy to securely expose administrative services. +- [ ] Use a Reverse Proxy to securely expose administrative services. # Additional Referfences