Podman Quadlet Documentation

[CorruptComputer]

I've created a really basic Podman Quadlet config for running this:

/etc/containers/systemd/nginx-proxy-manager.container

[Unit]
Description=Nginx Proxy Manager
Documentation=https://nginxproxymanager.com/setup
After=local-fs.target
Requires=podman.socket

[Container]
ContainerName=nginx-proxy-manager
Image=docker.io/jc21/nginx-proxy-manager:latest
PublishPort=80:80
PublishPort=443:443
PublishPort=81:81
Volume=/var/podman/nginx-proxy-manager/data:/data:Z
Volume=/var/podman/nginx-proxy-manager/letsencrypt:/etc/letsencrypt:Z

[Install]
WantedBy=multi-user.target default.target

Any interest in adding something like this to the setup docs?
https://nginxproxymanager.com/setup

Might be helpful for folks since I found basically no information on this when trying to search online.

[sallyhaj]

Thank you, that was very helpful. I was looking all around the internet.
I do that, but with a rootless user.

[jeffiscow2]

I've been looking for a week for a tut or example for podman! Can you share your config and maybe explain it a bit? I'm a noob when it comes to networking stuff and getting it all to work together, lol.

I'm trying to setup my server to be as FOSS as possible, and the documentation on things can be sparce.

EDIT: To run it rootless you just put the file in ~/.config/containers/systemd/ right?

[sallyhaj]

Yes @jeffiscow2 for rootless, file should be in ~/.config/containers/systemd
Here are the steps:

• Create two a folder for the container and inside that folder two sub-folders

mkdir -p ~/containers/nginxProxyManager/data
mkdir -p ~/containers/nginxProxyManager/letsencrypt

• Create the container file:
  nano $HOME/.config/containers/systemd/nginxpm.container
  And paste the coming code two it:

[Unit]
Description=Nginx Proxy Manager
Documentation=https://nginxproxymanager.com/setup
After=podman-user-wait-network-online.service
Requires=podman.socket

[Container]
Image=docker.io/jc21/nginx-proxy-manager:latest
AutoUpdate=registry
ContainerName=nginxpm
PublishPort=8080:80
PublishPort=8443:443
PublishPort=8181:81
Volume=%h/containers/nginxProxyManager/data:/data:Z
Volume=%h/containers/nginxProxyManager/letsencrypt:/etc/letsencrypt:Z

[Service]
Restart=Always

[Install]
WantedBy=default.target

• Then start and run the container:

systemctl --user daemon-reload
systemctl --user start nginxpm
systemctl --user status nginxpm
podman ps

To access to Nginx Proxy Manager UI, go to IP/localhost:8181 in the browser

[jeffiscow2]

Thank you! I love the idea of quadlets, but it's been a struggle writing the config files for everything I want toself-host and get it all working. This is a great help.

[sallyhaj]

There is a good tool to convert docker comman, compose to quadlet: podlet

[jimmyd-be]

Anyone tried to add this to networks? I want to use nginx proxy manager as a reverse proxy for my other containers? I did this on my docker setup and want to migrate to Podman. But when I configure a custom network and host network it fails to start. With only the custom network it starts but then the PublishPorts are not usable from the host.

And I use reserved ports for my instance 80:80, 443:443 and 81:81 in rootless mode.

[sallyhaj]

@jimmyd-be I assume that you want to use host network, in this case you have to use podman with root privilege or use something called "pasta" for rootless. Check this link https://docs.oracle.com/en/learn/ol-podman-pasta-networking/index.html

[jimmyd-be]

Has someone else had issues when migrating to Podman that the Access control is not working anymore. It looks like that the source IP adres is not anymore the IP address of the device but something else.

[jimmyd-be]

Access lists on IP address is not yet working in Podman.
#3922 should be fixed first before it can work in Podman. If you are not using Access lists then this setup is working just fine.