Quick answer: Nginx Proxy Manager = Docker UI for reverse proxy + Let’s Encrypt. Bind 80/443 only here; keep admin :81 off the public net.
VPS & root servers: Order VPS in Germany · NexoraHost · nexorahost.com (Maincubes FRA01 Frankfurt · Ryzen · NVMe · GDPR)
Frequently asked questions (FAQ)
What is Nginx Proxy Manager?
A web UI in front of Nginx: subdomains to container ports, Let’s Encrypt in one click.
NPM vs Caddy vs Traefik?
NPM: UI. Caddy: Caddyfile, auto HTTPS. Traefik: Docker labels. Raw Nginx: max control.
Which ports?
80 and 443 on the host belong to NPM only. Keep admin UI (81) off the public internet.
Certificate fails?
A record must hit the VPS, port 80 free for HTTP-01, no second service on :80.