diyfr

version: '3.5'

services:
  proxy:
    image: traefik:v2.1
    # The official v2.0 Traefik docker image
    container_name: proxy
    networks:
      - traefik
    ports:

marcopaganini

NGINX reverse proxy with SSL cert authentication

This is a short guide for those who want to set up a NGINX reverse proxy with SSL cert authentication. The basic idea is to create a private CA and emit certificates signed by it. Only browsers and/or devices with the certs signed by this CA will be granted access to resources behind the proxy.

There are a few examples of similar configurations on the web, but most use openssl directly. This gist uses Easy-RSA to simplify the task of creating and maintaining a private CA and certs to be distributed to clients.

Install and configure Easy-RSA

Clone Easy-RSA 3:

endpnt

    var offset = 0;
    var selection = window.getSelection();
    var range = selection.getRangeAt(0);
    var start = range.startOffset;
    var end = range.endOffset;

    if ( selection.baseNode.parentNode.hasChildNodes() ) { 
        for ( var i = 0 ; selection.baseNode.parentNode.childNodes.length > i ; i++ ) { 
            var cnode = selection.baseNode.parentNode.childNodes[i];
            if (cnode.nodeType == document.TEXT_NODE) {