Nginx Proxy Manager fronts all public services, handling reverse-proxy routing, SSL termination, and HTTP authentication layers. It resides on both frontend_net and backend_net, allowing it to reach internal services without exposing them directly to the internet.【F:frontdoor/compose.yml†L12-L25】
jc21/nginx-proxy-manager:latest80:80, 443:443frontend_net, backend_netnpm_data:/data, npm_letsencrypt:/etc/letsencryptunless-stoppednpm_data to apply dynamic bans; ensure log format remains standard for parsers.【F:crowdsec/compose.yml†L18-L26】npm_data regularly to preserve host configurations and SSL certificates; Autorestic can mount the volume by referencing the named volume.