Proxy Everything into a Linux Container with nginx
I previously wrote about setting up Node.js + Ghost in an Ubuntu LXC container and using Apache to proxy all web requests into that container. This works pretty well for the most part, but it seems like nginx is much better tool for this since it was pretty much designed to be a proxy server. We have a server that we are using for all Bit-Monkeys projects and I recently set up gitlab, along with a development site for openfaqs inside of LXC containers. The main benefit of this approach is that you can isolate the environments, manage upgrades and updates of various pieces separately, and fix issues in one environment without bringing down your entire infrastructure. Setting this up to work with nginx is super easy. First you will need to grab the IP address of your container which you can easily get by running as the root user
lxc-ls --fancy
apt-get install nginx. The last step is to create a virtual host config file for your container.vim /etc/nginx/sites-available/yoursite
server {listen 80;
server_name dev.openfaqs.com www.dev.openfaqs.com;
location / {
proxy_pass http://10.0.3.194:5000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-for $remote_addr;
port_in_redirect off;
proxy_redirect http://10.0.3.194:5000 /;
proxy_connect_timeout 300;
}
}
ln -s /etc/nginx/sites-available/yoursite /etc/nginx/sites-enabled/yoursiteservice nginx restart
Thank you for reading! Share your thoughts with me on bluesky, mastodon, or via email.
Check out some more stuff to read down below.
Most popular posts this month
Recent Favorite Blog Posts
This is a collection of the last 8 posts that I bookmarked.
- No-One Escapes the Permanent Underclass from Fernando Borretti
- Is it ethical to use AI? from charity.wtf
- The logical destination of LLMs from Andy Bell
- Revised rules of engineering leadership. from Irrational Exuberance
- The circus freaks of open source from Drew DeVault's blog
- Clanker: A Word For The Machine from Armin Ronacher's Thoughts and Writings
- I ran a half-marathon! from gluecko.se
- My Running Tips from Kevin Bell's Blog
Articles from blogs I follow around the net
Art Doesn't Scale
Listening to two acquaintances argue about if AI art is "art" is not a new experience for me, the now eternal debate between Doomer and Boomer. In this particular context, I'm listening to it as I wait for my surprisingly expensive iced latte in downtown C...
via matduggan.com July 17, 2026i can finally talk about something i worked on!
It feels like it was about 18 months ago, but could be as long as three years ago, that my friend told me about a TV show he was developing. It was a brilliant idea, I thought. A science fiction action comedy? YES PLEASE. It was funny, and clever, and...
via WIL WHEATON dot NET July 16, 2026Generated by openring