NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Admin Interface is INSECURE

Open
#2,640 26 comments 5 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug stale
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • No
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug

In the README.md it say: Beatifull and Secure Admin interface, the Admin Interface including the Login is served over HTTP and not HTTPS so it is by definition NOT secure!

Nginx Proxy Manager Version

All Version up to and including current Version

To Reproduce
Steps to reproduce the behavior:

  1. Install NPM as described in the docs
  2. Open the Admin interface

Expected behavior

Expect the Admin interface to be secured by SSL

Screenshots

Operating System
All

Additional context

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with README.md and the installation documentation, then reproduce the behavior using the current jc21/nginx-proxy-manager:latest Docker image. Trace how the Admin interface and login are exposed during the documented setup; done means the supported HTTPS behavior and security claim are consistent and verified.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, nginx
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.