Docker Local SSL Termination Proxy

A simple SSL Termination Proxy for accessing https://localhost.

This proxy is easy to use (1 command to launch) and nothing is installed on your local machine thanks to Docker.

Requirement

Docker (20.10.0+)

Usage

Assume that your application is running on http://localhost:8000, the following command makes us accept requests to https://localhost.

Mac OSX

docker run -it \
  -e "PORT=8000" \
  -p 443:443 \
  --rm \
  esplo/docker-local-ssl-termination-proxy

Linux

docker run -it \
  --add-host=host.docker.internal:host-gateway
  -e "PORT=8000" \
  -p 443:443 \
  --rm \
  esplo/docker-local-ssl-termination-proxy

Other platform

You need to make sure that host.docker.internal is resolved properly inside docker containers. For majority of platforms that don't resolve it automatically (like Docker Desktop for Mac), setting --add-host=host.docker.internal:host-gateway is enough.

Test connection

$ curl -k https://localhost/

Locally-trusted development certificates

The container can be configured to use custom certificates with the SSL_CERT and SSL_KEY environment variables. You can use mkcert to generate locally-trusted development certificates:

$ mkdir -p ssl
$ mkcert -install
$ mkcert --cert-file ssl/localhost.pem --key-file ssl/localhost.key localhost 127.0.0.1 ::1

and mount them to the container using bind mounts:

$ docker run -it \
  -e 'PORT=8000' \
  -e 'SSL_CERT=localhost.pem' \
  -e 'SSL_KEY=localhost.key' \
  -p 443:443 \
  -v "$(pwd)"/ssl:/etc/nginx/ssl/ \
  --rm \
  esplo/docker-local-ssl-termination-proxy

esplo/docker-local-ssl-termination-proxy