Production-grade reverse proxy with automatic SSL certificate management (Let's Encrypt), CrowdSec WAF/IPS, and auto-updates.
Includes: Nginx, Certbot, CrowdSec + bouncer, Watchtower
- Automatic Let's Encrypt SSL with 12h renewal
- CrowdSec behavior-based WAF (SQLi, XSS, brute-force detection)
- Rate limiting, security headers, HTTP/2 support
- Works with any Docker service — just add your upstream
docker compose up -dand go