Hi, wonder if any runs Ngnix Proxy Manager as a container on Mikrotik RB5009 (RouterOS 7.25). I plan to run this container on a Samsung T3 SSD USB attached to this router.
If yes pls let me know your experience.
Why not run the built-in reverse proxy?
Or the built in caddy /app for more advanced usage. I know folks have gotten the Ngnix Proxy Manager working, and there is threads on it. Someone has wrapped for mikrotik container, see GitHub - akmalovaa/mikrotik-proxy-manager: RouterOS container for managing reverse proxy through Winbox, CLI, or REST API ยท GitHub . I have not tested but there is at least something look at. But no one has wrapping in /app which easy in a lot of way of running a container if you rb5009 + 7.25+. That's why I'm steering towards caddy server since it's built-in.
But @lolosi is right. If needs are SSL on top of something, or SNI redirection, the /ip/reverse-proxy may be all you need. It doesn't automatically deal with cert nor have auth layer, so that's where the built-in reverse-proxy is weak.
Hi. After read yours interesting comments and googling a little I have this:
- Built-in reverse-proxy. Easy solution but it is very basic and for https I would have to get a paid SSL cert or renew manually time to time.
- Very interesting the built in Caddy /app. I did not know that MK does have a library of containers ready to use. The issue is that I have no experience so I will have to spend time to learn.
- Akmalovaa solution, looks very nice, but his solution seems only support Cloudflare DNS-01 challenge and I have another (Namecheap).
The Ngnix Proxy Manager would be the best solution (easy GUI and support a bunch of DNS providers) but it seems that it is not working well whit Mikrotik.
For now I think this is a bumpy road to achieve at the same time on MK powerful reverse-proxy, Let's Encrypt set renew certs, and stable and fully compatible system for RouterOS.
Some AI/Google give you a caddy config file in one prompt. You paste the into the config of the Caddy /app, after review, but it pretty simple config language and there plenty of example outside AI. If you have /container, have disk, etc. that the hard part to align.
That is outside the firewall. So issue isn't the particular proxy server you're using, it just the firewall rules need are tricky to get right, and not easy to say "use these" since it depends on what your proxying and where to/from. Even caddy does not fully solve this, since it's still depends on the use case whether more firewall filter/nat/mange thing might be needed.
Hi, tnks for the hints. I'm going to test Caddy and do my best to configure firewall