Nginx Proxy Manager on Synology 7.2 Docker Guide

# Nginx Proxy Manager on Synology 7.2 Docker Guide ## 📋 Overview This comprehensive tutorial demonstrates how to install and configure Nginx Proxy Manager (NPM) on Synology NAS 7.2 using Docker. NPM is an open-source graphical management tool for Nginx that simplifies reverse proxy configuration and SSL certificate management through an intuitive web interface. --- ## 🎯 Core Content ### 1. **Tool Introduction** - **Nginx Proxy Manager**: Open-source GUI-based Nginx manager - Key Features: Visual reverse proxy configuration, automated SSL certificate issuance and renewal - Version: 2.12.3 (latest as of February 28, 2025) ### 2. **Prerequisites** **Domain & DNS Configuration** - Wildcard DNS resolution (*.i.lib00.com) pointing to iKuai router's IPv4 - DNSPod parameters: API TOKEN (ID + Key), login email **Port Forwarding Setup** - Configure in iKuai router: - External port 55111 → Internal port 80 - External port 55112 → Internal port 443 - Workaround for residential ISP blocking ports 80/443 **Image Download** - Download NPM image from dpit.lib00.com - Available in compressed (.gz) and uncompressed (.tar) formats - Image size: ~1GB (5-6x larger than vanilla Nginx) ### 3. **Installation Process** **Directory Structure** ``` /docker/nginx_proxy_manager_2.12.3/ ├── data/ └── letsencrypt/ ``` **Docker Command Breakdown** ```bash docker run -d --restart=always \ --name nginx-proxy-manager \ -p 81:81 \ -p 55111:80 \ -p 55112:443 \ -v /path/to/data:/data \ -v /path/to/letsencrypt:/etc/letsencrypt \ jc21/nginx-proxy-manager:2.12.3 ``` **Configuration Details**: - Port 81: Admin panel access - Ports 55111/55112: Map to container's internal 80/443 - Two volume mounts for persistent data storage ### 4. **Initial Setup** **First Login** - Access URL: `http://NAS_IP:81` - Default username: admin@example.com - Default password: changeme - Mandatory password and email change on first login **Important Notes**: - Wait 3-5 minutes after container restart (loads remote IP databases and APIs) - Chinese network conditions may cause slower initialization ### 5. **Reverse Proxy Configuration** **Creating Proxy Rules** 1. Navigate to "Proxy Hosts" menu 2. Add new record: - Domain Name: Subdomain (e.g., hbx-i.lib00.com) - Forward Hostname/IP: Target service IP - Forward Port: Target service port (e.g., 3000) 3. Save to enable domain-based access **Technical Notes**: - Avoid conflicts with Synology DSM's built-in reverse proxy - Container uses port 80 internally, accessed via 55111 externally - Double port forwarding: iKuai → Docker Host → Container ### 6. **SSL Certificate Management** **Automated Let's Encrypt Certificates** 1. Go to "SSL Certificates" menu 2. Request new certificate: - Domain Names: Enter target domain - Use DNS Challenge method - DNS Provider: Select DNSPod - Enter DNSPod login email - Credentials: Format as `TOKEN_ID,TOKEN_KEY` **Certificate Application** - Edit existing proxy host - Select certificate in SSL tab - Enable HTTP/2 support - Automatic certificate renewal handled by system **Verification**: - Access `https://domain:55112` - Browser shows secure padlock icon - Certificate issued by Let's Encrypt --- ## 💡 Technical Highlights 1. **Dual-Layer Port Mapping**: Clever solution for residential ISP port restrictions 2. **Containerized Deployment**: Docker ensures environment isolation and easy management 3. **Automated Certificate Management**: No manual renewal required 4. **Graphical Interface**: Lowers Nginx configuration barrier for beginners --- ## ⚠️ Common Issues - **Large Image Size**: GUI convenience comes with storage cost - **Network Latency**: Initial startup may be slower in China - **Domain Conflicts**: Must isolate from existing reverse proxy rules - **Cloud Storage Restrictions**: Image files may be hidden on some platforms --- ## 🎓 Use Cases - Synology NAS users managing multiple web services - Adding HTTPS encryption to self-hosted applications - Users unfamiliar with Nginx command-line configuration - Centralized management of multiple domains and certificates --- ## 🔗 Related Resources - Image download: dpit.lib00.com - Documentation: Complete configuration file templates provided - Tutorial series: Includes prerequisite topics like DNS resolution and SSH setup --- ## SEO Keywords Synology NAS, Docker tutorial, Nginx Proxy Manager, reverse proxy, SSL certificate, Let's Encrypt, GUI management, open-source tools, DNS resolution, port forwarding, home server, self-hosted website, HTTPS configuration, DNSPod, Synology 7.2