Nginx with docker and letsencrypt

[Flox]

Hi @Bert
I would second @vesper1978’s wise advice on not exposing Rockstor’s webUI if you don’t have to.
I do understand that jwilder’s nginx images do require ports 80 and/or 443 (or at least used to?) so as an alternative, you can change the port used by Rockstor’s webUI from 443 to whatever else is not used.
To do so, go to “System > Services” and click on the little wrench icon next to the Rockstor service to configure it. There, simply use the port of your choice for the “HTTPS Port” (see below), but note of course that you will need to use that new port when you need to access Rockstor’s webUI from now on.

Regarding Nextcloud setup, you will find a few resources on this forum, from users who wrote nice “how-to” guides with similar apps. Feel free to have a look at them:

Getting nginx to work remotely and securely via HTTPS/SSL

Hi there, I’ve done a ridiculous amount of searching and IRC bothering on getting a lot of the Rock-On containers to work with nginx via reverse proxy all passed through SSL/HTTPS. I finally got a great set up working so I wanted to share with the rest of the world considering I found absolutely no configuration online as to what I wanted. This how-to is a work in progress, so please feel free to send me a message or comment on this page if there are any suggestions or if I’m blatantly providin…

OwnCloud with HTTPS setup for SOHO use

This is a Guide Post to get OwnCloud Setup with HTTPS for more basic use scenarios. After 3 holiday vacation days spent playing around with the various OwnCloud builds, I’ve tried a number of successful options. BUT for new-comers this is tricky stuff, and despite there being some really great options posted already (like the Owncloud Rockon HTTPS guide which suggests stronger encryption and a better database) my opinion is that for many Rockstor users, it’s a bit too much and too tough to star…

Of course, you can also use an Nginx Rock-on to do the same thing, which would allow you to leave Rockstor’s nginx config alone.
You may also be interested to know that I’m currently working on implementing an easy way to do just what you need and are apparently doing on your openSUSE system:

@Bert

On my opensuse testsystem this combination of docker containers, connected by a docker network, and https does work.

We indeed have a pending pull-request on Github that would add support for docker labels to Rock-ons, followed by a current work in progress to implement docker networks into Rockstor and the Rock-ons system (see below).
https://github.com/rockstor/rockstor-core/pull/1999

Main discussion on docker networks, with reference to more focused individual issues therein:
https://github.com/rockstor/rockstor-core/issues/1982

Hope this helps,