docker-nginx-accessfabric

Nginx + ngx_http_auth_accessfabric + miniubuntu

A compiled-from-source copy of nginx with the ScaleFT module for their Access Fabric product. This container requires you provide your own TLS certificates. If you want to use LetsEncrypt/Certbot, see obviateio/docker-nginx-accessfabric.

Usage

• Login to ScaleFT
• Create a project
• Go into that project & create an application
• Verify your origin URL (ex: gitlab.ext.company.tld) is in DNS and externally resolveable
• Cname the custom hostname (ex: gitlab.company.tld) to the application URL (ex: random-words-1234.accessfabric.com)
• mkdir ./conf.d/
• Add a .conf such as (ex: ./conf.d/gitlab.conf):

server {
    auth_accessfabric	on;
    auth_accessfabric_audience "https://random-words-1234.accessfabric.com";
    listen              443 ssl;
    server_name         gitlab.ext.company.tld gitlab.company.tld random-words-1234.accessfabric.com";
    ssl_certificate     /etc/nginx/conf.d/gitlab.ext.company.tld-fullchain.pem;
    ssl_certificate_key /etc/nginx/conf.d/gitlab.ext.company.tld-privkey.pem;

    location / {
        proxy_pass http://gitlabinstance.company.int:80;
    }
}

• Run docker container:

docker run --name=nginx \
 -v /home/myuser/conf.d/:/etc/nginx/conf.d/ \
 -p 80:80 -p 443:443 \
 --restart=always \
 -d shakataganai/nginx-accessfabric-certbot:latest