this post was submitted on 21 Jul 2025
448 points (98.5% liked)

memes

16906 readers
3029 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/Ads/AI SlopNo advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.

A collection of some classic Lemmy memes for your enjoyment

Sister communities

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] 30p87@feddit.org 29 points 4 weeks ago (3 children)

Unix sockets all the way. The only open ports for web traffic should be the reverse proxy (so nginx).

[–] passepartout@feddit.org 16 points 4 weeks ago* (last edited 4 weeks ago)

Or Caddy (simpler than and imho spiritual successor to nginx).

Or Traefik (has loads of convenient middlewares for reverse proxy stuff).

Or Apache (if it is somehow better suited to your use case).

[–] marduk@lemmy.sdf.org 8 points 4 weeks ago (3 children)
[–] floquant@lemmy.dbzer0.com 2 points 4 weeks ago

haproxy is awesome

[–] hperrin@lemmy.ca 1 points 4 weeks ago

Haproxy is great, but setup is hard. It’s more for load balancing than being an easy reverse proxy.

[–] Mora@pawb.social -1 points 4 weeks ago* (last edited 4 weeks ago)

Seeing that Red Hat also uses this in OpenShift: no. ~/s~

[–] x00z@lemmy.world 3 points 4 weeks ago

I use docker ports but only allow the loopback like this: 127.0.0.1:11551:80

And then serve that app with the reverse proxy.