mirror of
https://github.com/netbirdio/docs.git
synced 2026-04-25 20:06:35 +00:00
Align proxy docs with getting-started.sh: fix image name, Traefik labels, add proxy domain warning and quickstart flow (#597)
This commit is contained in:
@@ -63,6 +63,7 @@ The script generates the following files:
|
||||
| `docker-compose.yml` | Docker Compose configuration with all services |
|
||||
| `config.yaml` | Combined server configuration (management, signal, relay, STUN) |
|
||||
| `dashboard.env` | Environment variables for the dashboard container |
|
||||
| `proxy.env` | Environment variables for the proxy container (only when proxy is enabled) |
|
||||
|
||||
For options 2-4, additional configuration files are generated (e.g., `nginx-netbird.conf`, `caddyfile-netbird.txt`, or `npm-advanced-config.txt`).
|
||||
|
||||
@@ -141,13 +142,30 @@ NetBird includes built-in local user management powered by an embedded <a href="
|
||||
|
||||
## Enable the Reverse Proxy Feature
|
||||
|
||||
The quickstart installation does not include the [Reverse Proxy](/manage/reverse-proxy) feature by default. To enable it, you need to add the `netbird-proxy` container to your deployment and configure a separate proxy domain.
|
||||
When you select the built-in Traefik option (`[0]`), the script asks whether you want to enable the NetBird Proxy service:
|
||||
|
||||
```
|
||||
Do you want to enable the NetBird Proxy service?
|
||||
The proxy exposes internal NetBird network resources to the internet.
|
||||
Enable proxy? [y/N]:
|
||||
```
|
||||
|
||||
If you answer `y`, the script prompts for a **proxy domain**:
|
||||
|
||||
```
|
||||
WARNING: The proxy domain MUST NOT be a subdomain of the NetBird management
|
||||
domain (netbird.example.com). Using a subdomain will cause TLS certificate conflicts.
|
||||
|
||||
Enter the domain for the NetBird Proxy (e.g. proxy.my-domain.com):
|
||||
```
|
||||
|
||||
<Warning>
|
||||
The proxy domain **must not** be a subdomain of your NetBird management domain. For example, if your management server is at `netbird.example.com`, do not use `proxy.netbird.example.com`. Use a separate subdomain like `proxy.example.com` instead. Using a subdomain of the management domain causes TLS and routing conflicts between the proxy and management services.
|
||||
The proxy domain **must not** be a subdomain of your NetBird management domain. For example, if your management server is at `netbird.example.com`, do not use `proxy.netbird.example.com`. Use a separate subdomain like `proxy.example.com` instead. Using a subdomain of the management domain causes TLS certificate conflicts.
|
||||
</Warning>
|
||||
|
||||
See the [Enable Reverse Proxy migration guide](/selfhosted/migration/enable-reverse-proxy) for step-by-step instructions on adding the proxy to an existing deployment, including token generation, Docker Compose configuration, and DNS setup.
|
||||
The script then automatically generates a proxy access token, creates a `proxy.env` configuration file, and starts the proxy container alongside the other services. Point a wildcard DNS record (`*.proxy.example.com`) to your server's IP address so that service subdomains resolve correctly.
|
||||
|
||||
If you skipped the proxy during initial setup, you can add it later by following the [Enable Reverse Proxy migration guide](/selfhosted/migration/enable-reverse-proxy).
|
||||
|
||||
## Maintenance
|
||||
|
||||
|
||||
Reference in New Issue
Block a user