STACK.GE
ქარ Let’s talk

Infrastructure 06.5 — Proxy

Nginx Proxy Manager, Zoraxy and HTTPS

One entry point for every service, automatic certificates and Cloudflare integration. I deploy Nginx Proxy Manager or Zoraxy — matched to your complexity.

Start a project Explore
1panel
For every service
A+
TLS configuration
0GEL
Let’s Encrypt

Proxy and HTTPS / capabilities

What it covers

Clean domains, valid HTTPS and control over which service is public and which stays internal.

Nginx Proxy Manager

A visual panel, domains, redirects and certificates — without writing config by hand.

Zoraxy

A lightweight alternative when you want simple management, stats and fewer resources.

Automatic HTTPS

Let’s Encrypt and wildcard certificates via DNS-01 — renewal is automatic.

Cloudflare integration

DNS, proxy, WAF and Tunnel — the server IP can stay completely hidden.

Access control

Internal services only via VPN or IP allow-list, public ones for everyone. From one place.

Zero-downtime changes

Adding or moving a service without downtime — users notice nothing.

process

How the process runs

  1. 01

    Inventory

    What services you run, which ports are open and which domains are needed.

  2. 02

    Choice

    NPM or Zoraxy, with or without Cloudflare — driven by technical and operational needs.

  3. 03

    Configure

    Proxy hosts, TLS, redirects and security headers.

  4. 04

    Migration

    Moving existing services in stages, with DNS under control.

cases

Examples

Services

12 services behind one proxy

Each service gets its own subdomain and valid HTTPS — managed from one panel.

Cloudflare

Tunnel — without open ports

The service is reachable from the internet, yet not a single port is open on the router.

faq

Common questions

NPM or Zoraxy?

NPM — more features and a familiar interface. Zoraxy — lighter and simpler. We choose together.

Is Cloudflare required?

No. The proxy works on its own; Cloudflare adds WAF, CDN and IP masking.

Do certificates cost anything?

Let’s Encrypt is free and renews automatically. Paid only if you need a commercial CA.

All directions

Other sub-directions

06.1 Proxmox VE 06.2 Backup 06.3 Network 06.4 VPN 06.6 S3 storage 06.7 Uptime Kuma

Running services on open ports?

I will set up one entry point, valid HTTPS and clean domains.

Let’s talk

Contact

Get in touch about your technical task

Contact me by phone or WhatsApp. Critical incidents are covered 24/7; other requests are handled within the agreed support schedule.

Call now +995 510 10 35 35 Straight to the phone

24/7 on critical incidents — Response mode

If I miss your call, I will get back to you.