Efficiently manage reverse proxy hosts and automated SSL termination using Nginx Proxy Manager.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install nginx-proxy-manager
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install nginx-proxy-manager using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Nginx Proxy Manager?
This skill provides a robust interface for managing Nginx Proxy Manager (NPM), a powerful tool for handling reverse proxy duties and SSL termination. By utilizing this skill within the Openclaw Skills ecosystem, developers can automate the lifecycle of proxy hosts, ensuring that traffic is correctly routed to internal staging or production services with minimal manual intervention. It excels at streamlining the process of requesting certificates, enforcing security protocols, and managing subdomains.
Designed for technical users who need to maintain infrastructure-as-code principles, this skill bridges the gap between raw Nginx configurations and a managed UI. It allows for the programmatic creation of entry points for web applications while maintaining high security standards through automated Let's Encrypt integration and exploit blocking.
Nginx Proxy Manager Use Cases
- Automating SSL termination for newly deployed staging environments.
- Routing external domain traffic to internal Docker containers or private IP addresses.
- Requesting and automatically renewing Let's Encrypt certificates for various subdomains.
- Enforcing HTTPS redirects and HSTS for production-grade web applications.
- Configuring websocket support for real-time applications like chat or streaming services.
How Nginx Proxy Manager Works
- The skill first confirms that the public DNS records correctly resolve to the NPM public IP address.
- It authenticates with the Nginx Proxy Manager API using securely stored environment variables (NPM_BASE_URL, NPM_IDENTITY, and NPM_SECRET).
- It creates or updates a Proxy Host entry defining the domain names, upstream scheme (HTTP/HTTPS), target IP, and port.
- Security features such as 'Block Common Exploits' and 'Websockets Support' are toggled based on the specific requirement.
- The skill initiates an SSL certificate request through Let's Encrypt and configures Force SSL and HTTP/2 support.
- Finally, it validates the setup by performing header checks to ensure the service returns the expected status codes.
Nginx Proxy Manager Setup
To get started with this skill, you must provide your NPM credentials as environment variables to avoid hardcoding sensitive information. Openclaw Skills work best when secrets are managed externally.
export NPM_BASE_URL="http://<npm-host>:81"
export NPM_IDENTITY="[email protected]"
export NPM_SECRET="your-secure-password"
You can verify your connection to the API by running a token request command:
curl -sS -X POST "$NPM_BASE_URL/api/tokens" \
-H 'Content-Type: application/json; charset=UTF-8' \
--data "{\"identity\":\"$NPM_IDENTITY\",\"secret\":\"$NPM_SECRET\"}"
Nginx Proxy Manager Data Schema & Taxonomy
The skill organizes proxy configuration data using the following schema to ensure consistency across environments:
| Field | Description | Type |
|---|---|---|
| Domain Names | The public-facing hostnames to be proxied | Array of Strings |
| Upstream Target | The internal IP or hostname of the destination server | String |
| Target Port | The port the internal service is listening on | Integer |
| Scheme | The protocol used to communicate with the upstream (http/https) | String |
| SSL Configuration | Settings for Let's Encrypt, Force SSL, and HSTS | Object |
| Security Flags | Booleans for Websockets, Block Exploits, and Cache Assets | Object |
Nginx Proxy Manager Advanced Features
- Automated Let's Encrypt certificate issuance and renewal cycles.
- Support for advanced Nginx features like HSTS, HTTP/2, and Websockets.
- Environment-aware routing (e.g., automatically differentiating between app.example.com and staging.example.com).
- Integration with Openclaw Skills safety protocols, including mandatory staging validation before production changes.
- Comprehensive troubleshooting workflows for 502 Bad Gateway errors and DNS resolution failures.
SKILL.md
Loading
Related Openclaw Skills
SlideSpeak PowerPoint Automation
Automate the creation, editing, and management of professional PowerPoint presentations from text or documents using the SlideSpeak API.
xAI Grok Integration
A high-performance integration for Openclaw Skills that enables interaction with xAI's Grok models for advanced reasoning and real-time information retrieval.
Supabase
A dedicated skill for querying Supabase project analytics, user signups, and database metadata directly through your AI agent.
Spotify Web API
A cross-platform skill allowing AI agents to control Spotify playback, search tracks, and analyze listening history via the official Web API.
AI Automated Development (ai-auto-dev)
A comprehensive AI-driven development workflow that uses a Project Manager and Builder architecture to automate coding tasks from requirements to GitHub delivery.
data-sync
A secure, incremental synchronization tool for Claude Code assets that uses a relay server for multi-device consistency and GitHub for versioned archiving.
Featured*
