360 Secure SkillHub
360 安全技能中心

Nginx Proxy Manager

调用 Nginx Proxy Manager 的 REST API,用 python scripts/npm_client.py 列出/查看/启用/禁用/删除代理主机以及查看证书;新增主机与 SSL 配置需自行用 curl 调用 API。需配置 NPM_URL、NPM_EMAIL、NPM_PASSWORD 环境变量。

weird-aftertaste
weird-aftertaste
热度 93.85
最近更新 2026-05-17 11:03:21
分类:开发依赖:代码执行 / 第三方 API应用场景:DevOps / API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add npm-proxy
Metadata
name
npm-proxy
description
Manage Nginx Proxy Manager (NPM) hosts, certificates, and access lists. Use when the user wants to add a new domain, point a domain to a server/port, enable SSL, or check the status of proxy hosts.

NPM Proxy Skill

Manage Nginx Proxy Manager (NPM) via its REST API.

Configuration

Set the following environment variables:

  • NPM_URL: The URL of your NPM instance (e.g., https://npm.example.com)
  • NPM_EMAIL: Your NPM admin email
  • NPM_PASSWORD: Your NPM admin password

Usage

# List all proxy hosts
python scripts/npm_client.py hosts

# Get details for a specific host
python scripts/npm_client.py host <host_id>

# Enable/Disable a host
python scripts/npm_client.py enable <host_id>
python scripts/npm_client.py disable <host_id>

# Delete a host
python scripts/npm_client.py delete <host_id>

# List certificates
python scripts/npm_client.py certs

Workflows

Adding a new Proxy Host

To add a new host, use curl directly (the script is currently minimal). Example payload for POST /api/nginx/proxy-hosts:

{
  "domain_names": ["sub.example.com"],
  "forward_scheme": "http",
  "forward_host": "192.168.1.10",
  "forward_port": 8080,
  "access_list_id": 0,
  "certificate_id": 0,
  "ssl_forced": false,
  "meta": {
    "letsencrypt_email": "",
    "letsencrypt_agree": false,
    "dns_challenge": false
  },
  "advanced_config": "",
  "locations": [],
  "block_exploits": true,
  "caching_enabled": false,
  "allow_websocket_upgrade": true,
  "http2_support": true,
  "hsts_enabled": false,
  "hsts_subdomains": false
}

Enabling SSL (Let's Encrypt)

  1. List certs with certs to see if one exists.
  2. Update the host with certificate_id and ssl_forced: true.