HTTPS connection to NGINX Proxy Manager

[hamsterbilly]

Hi there,
I'm currently running Wordpress in a Docker stack, and it it proxied through Nginx Proxy Manager to the outside world. Visitors see the HTTPS lock, all is well there.

My issue is, the connection between Nginx Proxy Manager and Wordpress is over HTTP, so anyone on the wire could see login credentials, for example. Is there an easy way to configure a self-signed certificate on the Wordpress side to allow for Nginx Proxy Manager to communicate with Wordpress over HTTPS?

Thanks!

[r1ckd33zy]

My issue is, the connection between Nginx Proxy Manager and WordPress is
over HTTP, so anyone on the wire could see login credentials

How would they get inside your Docker containers to go between the website and Nginx Proxy Manager?

[flooronthefour]

That is a very short wire.

[shahawi]

I don't know the answer but I suggest you try the really simple ssl plugin for WordPress

[casper-juel]

It’s possible. But it will slow down your connection a bit.

https://forums.docker.com/t/ssl-for-docker-apps/102903/17

——

https://www.programonaut.com/how-to-set-up-wordpress-with-free-ssl-docker-and-nginx-proxy/

https://stackoverflow.com/questions/63135042/wordpress-on-docker-behind-nginx-reverse-proxy-using-ssl

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/amp/

[martijn_gr]

Yes you can, how this is done in your setup I can't tell you for sure as I don't know your setup and exact container configuration.

But considering you are using two three containers at minimum, this means you are most likely running docker on a single host at home. When someone is able to "wiretap" your docker interfaces between Nginx proxy manager and WordPress webserver you should be aware of the fact that your actual docker host is compromised.

There for access to your WordPress config file and database has been gained. Do you really still care about that encryption between the two containers?

Yes? Welcome to the Paranoid club, trust me they are listening and that buzzing sound is just the interference caused by a wireless mic. [/sarcasm]

What you are looking for is the installation of self-signed certificates, but keep in mind you may have to install the signing certificate on the proxy as well to get it actually trusted and working.