nginx ui
Table of Contents
Introduction
We use nginx in our company lab environment. It often happens that my
colleagues have developed an application that is now deployed in our Stage
or Prod environment. To make this application accessible nginx has to be
adapted. Most of the time my colleagues don't have the permission to access
the server and change the configuration files and since I don't feel like
doing this for everyone anymore I thought a UI could help us all. If you
feel the same way I wish you a lot of fun with the application and I am
looking forward to your feedback, change requests or even a star.
Setup
Containerization is now state of the art and therefore the application is
delivered in a container.
Example
-drun as deamon in background--restart=alwaysrestart on crash or server reboot--name nginxuigive the container a name-v /etc/nginx:/etc/nginxmap the hosts nginx directory into the container-p 8080:8080map host port 8080 to docker container port 8080
docker run -d --restart=always --name nginxui -v /etc/nginx:/etc/nginx -p 8080:8080 schenkd/nginx-ui:latest
Docker
Repository @ DockerHub
Docker Compose excerpt
# Docker Compose excerpt
services:
nginx-ui:
image: schenkd/nginx-ui:latest
ports:
- 8080:8080
volumes:
- nginx:/etc/nginx
UI
With the menu item Main Config the Nginx specific configuration files
can be extracted and updated. These are dynamically read from the Nginx
directory. If a file has been added manually, it is immediately integrated
into the Nginx UI Main Config menu item.
Adding a domain opens an exclusive editing window for the configuration
file. This can be applied, deleted and enabled/disabled.
Authentication
In general, this app does not come with authentication. However, it is easy to setup basic auth to restrict unwanted access.
Here is how this can be done when using nginx.
Configure the auth file
- Verify that
apache2-utils(Debian, Ubuntu) orhttpd-tools(RHEL/CentOS/Oracle Linux) is installed - Run the htpasswd utility to create a new user and set a passwort.
- Make sure, that the directory exists
- Remove the
-cflag, if you have created a user before, since it creates the inital user/passwort file sudo htpasswd -c /etc/apache2/.htpasswd user1
Configure nginx
The following example adds basic auth to our nginxui app running in a docker container with a mapped port 8080.
In this case, it will be accessible via nginx.mydomain.com
server {
server_name nginx.mydomain.com;
location / {
proxy_pass http://127.0.0.1:8080/;
}
auth_basic "nginxui secured";
auth_basic_user_file /etc/apache2/.htpasswd;
# [...] ommited ssl configuration
}
- Add above nginx conf to your
/etc/nginx/my.conffile - Run
nginx -tto make sure, that your config is valid - Run
systemctl restart nginx(or equivalent) to restart your nginx and apply the new settings - Your nginx ui is now accessible at nginx.mydomain.com and will correctly prompt for basic auth