Infrastructure Overview

Central SSL termination and reverse proxy for all external HTTPS traffic

Purpose

• Handles all SSL/TLS termination for external traffic
• Manages Let's Encrypt certificates via Certbot
• Reverse proxies requests to internal services
• Single point for certificate management

NGINX Proxy Manager Access

# SSH to SSL Proxy (dockerhost-02)
ssh -i /root/.ssh/id_ed25519_to_250 indigoadmin@10.0.0.251

# Or with bennybeen automation key
ssh -i /home/indigoadmin/.ssh/bennybeen_automation indigoadmin@10.0.0.251

Domain Routing (All Active)

NGINX Proxy Manager Docker Setup

# docker-compose.yml on 10.0.0.251
version: '3.8'
services:
  nginx-proxy-manager:
    image: jlesage/nginx-proxy-manager:latest
    container_name: nginx-proxy-manager
    restart: unless-stopped
    ports:
      - '80:8080'    # HTTP
      - '81:8181'    # Admin UI
      - '443:4443'   # HTTPS
    volumes:
      - ./config:/config:rw
    environment:
      - TZ=America/Chicago
      - DISABLE_IPV6=0

SSL Certificates (Managed by NPM)

SSL certificates are automatically managed via Let's Encrypt through the NPM web interface. To add/renew certificates:

1. Access NPM admin at http://10.0.0.251:81
2. Navigate to SSL Certificates
3. Add Let's Encrypt certificate with domain validation
4. Assign to proxy hosts

Internal Network (10.0.0.0/24)

External Access

Inter-Server Communication

Testing Connectivity

# From Orchestrator, test SSL Proxy
nc -zv 10.0.0.251 443

# From Orchestrator, test BennyBeen services
nc -zv 10.0.0.250 5432   # PostgreSQL
nc -zv 10.0.0.250 5678   # n8n
nc -zv 10.0.0.250 8081   # Shlink
nc -zv 10.0.0.250 9000   # Listmonk

# Test all Mad Monkey servers
for ip in 10.0.0.251 10.0.0.197 10.0.0.250; do
  echo "Testing $ip..."
  nc -zv -w 2 $ip 22
done