Reverse Proxy & SSL

DockLog works best behind a reverse proxy when you want HTTPS, a custom domain, or access controls in front of the app.

Nginx example

nginx

location / {
  proxy_pass http://127.0.0.1:8888;
  proxy_http_version 1.1;
  proxy_set_header Host $host;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto $scheme;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "Upgrade";
}

Checklist

WebSocket support

Forward Upgrade headers so live log streaming does not drop behind HTTPS.

HTTPS first

Terminate TLS before exposing auth mode to a broader team or the public internet.

Header preservation

Set TRUST_PROXY=true and add your public URL to ALLOWED_ORIGINS so login and origin checks work behind HTTPS.

Edit or suggest changes on GitHub.