What I've come up with is a simple configuration-based (json or yaml) templating system.
With nginx-quick-relay you can add back-ends to two groups: - `pass-through`: it forwards HTTP+HTTPS traffic as is with optional PROXY protocol, OR - `direct-serve`: it acquires and renews certificates, redirects HTTP to HTTPS, and forwards traffic to your HTTP/HTTPS endpoint
It also handles - client certificates (per domain) to only allow trusted peers to access your resources - optional exclusion of local network traffic from client certificate requirement (based on CIDR) - server certificates (per back-end server) - PROXY protocol to preserve info on the requesting client
No comments yet.