did you know nginx can reverse-proxy to a local unix-domain socket? never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or... - ThreadSky

retr0.id • 133 days ago

did you know nginx can reverse-proxy to a local unix-domain socket?

never worry about remembering port numbers again! or running out of ports, or accidentally exposing internal services, or SSRF, or...

Comments

atlaslabs.sh•133 days ago

What? No way, I gotta go try this.

handle.invalid•133 days ago

Yeah way, has been possible for quite some time now! We used to do this at $ork before we went to play with the big boy toys and ended up with 75 servers. Now shit's complicated, used to be simple :D

memesforyouranus.bsky.social•132 days ago

Bro im just a social media user

tired.moe•131 days ago

Caddy can also do this :3

neiliebaby.bsky.social•131 days ago

I don't!

woovie.net•133 days ago

i think people significantly underestimate the usefulness of nginx. i’ve used it to produce multiple encoded stream resolutions with ffmpeg. it can do so much.

nicknet.cc•132 days ago

woovie.net•132 days ago

yessss 👏

videl.fslhome.org•132 days ago

How did you do that?

woovie.net•132 days ago

Using this module, the examples in the README go into great detail on how to use it :D

videl.fslhome.org•132 days ago

Thanks!

pmkelly409.bsky.social•132 days ago

aapoalas.trynova.dev•132 days ago

I did indeed! I'm not sure if nginx supports Unix domain sockets on Windows or not though? If it does, then it is time to ponder the same about Node.js.

goryramsy.bsky.social•132 days ago

Or...??

joycesvoice.bsky.social•132 days ago

I write and speak English but I have no idea what this means.😅

dctucker.com•132 days ago

Given this knowledge, I think the real question is how readily can Dockerized Node.js services point to a domain socket rather than the ubiquitous "use port 3000 because surely nobody else would use that port"

macil.tech•133 days ago

Unix domain sockets are great. Windows even supports them since a few years ago.
Never need to worry about some other process/user on the same machine accessing a service it shouldn't if your socket is accessed by a file in a folder only the correct user can access.

rooot.gay•133 days ago

>running out of ports
yeah im getting pretty close to the 65535 limit of services running on my singular server.... might need to look into unix sockets...

retr0.id•133 days ago

the number of cool ports is much smaller, though

rooot.gay•133 days ago

i relate to this issue so much,, i just started keysmashing my numpad at some point, which comes with a few issues:
- the ports tend to go over 65k which is a little annoying :3c
- i have managed to get the same port multiple times already

brorodeo.bsky.social•132 days ago

Yeah when I keysmash my hand nerves wanna play Ode to Joy or Stairway to Heaven, it seems. It's really not random.

cybertictacs.bsky.social•132 days ago

there's no way how do you have 65k ports bound :D

horrorfacts.com•131 days ago

Nginx is awesome

acamelwithahump.bsky.social•132 days ago

How have I gotten this old without ever worrying about this?!

fatherdame.bsky.social•132 days ago

This was not on my list of worries.

Bombas socks changed my life with a seamless design that no longer pisses my toes off.

fairfruit.tv•133 days ago

the struggle when 3000, 5000, 8000, 8080 and 8888 are all taken

szervkerskedo.bsky.social•133 days ago

Been doing an nginx to docker forward proxy, with an scp continous deployment, pretty easy to setup, no need for ssl stuff in the docker as well

abbieadams.bsky.social•132 days ago

Dude, this is crazy. Thanks for the tip!

mitchubishi4554.bsky.social•132 days ago

Ah y'know it never occurred to me.

michigangsta.bsky.social•132 days ago

I did not know that, and yet after reading it several times... I still don't. Happy to know I'm not exposing my internal services though. Cheers 🥂

prag0matic.bsky.social•132 days ago

Bro, what? I can’t master the light dark switch on my toaster.

richardhowes.tech•132 days ago

Wow! Thank you!!

This is going to be so useful for us. Going to test it in the next few days.
🙏🙏

synchrom.bsky.social•131 days ago

I’ve always done this for PHP-FPM

xeiaso.net•132 days ago

I used to do that a bunch on my NixOS setup! Xesite used to have support for that, had to hack Axum up a lot to do it too.

Good times.

theholytachanka.bsky.social•132 days ago

Didn't think I would see you here, your articles have saved my ass a lot of time lmao ty

stevesinspirations.bsky.social•132 days ago

Yea I’ve been struggling through restricting it to just my network and do self signed ssl certs. I’ll get it figured out eventually just don’t want to manage it manually

nicknet.cc•132 days ago

I don't know why but this was clogging up my LibreNMS install, so I had to use the service on a port instead.