Docker

The OCI image is published to Docker Hub as tinyrack/proxer and to GHCR as ghcr.io/tinyrack-net/proxer.

Check the image version:

docker run --rm tinyrack/proxer --version

---

Run a Server

docker run --rm -p 8080:8080 tinyrack/proxer \
  server \
  --listen 0.0.0.0:8080 \
  --domain proxy.example.com \
  --token dev-token

The server does not require a volume. Tunnel registrations live in memory and are recreated when clients reconnect.

---

Docker Compose

services:
  proxer:
    image: ghcr.io/tinyrack-net/proxer:latest
    command:
      - server
      - --listen
      - 0.0.0.0:8080
      - --domain
      - proxy.example.com
    environment:
      PROXER_TOKEN: dev-token
      PROXER_TRUSTED_PROXIES: loopback,private
    ports:
      - "8080:8080"
    healthcheck:
      test: ["CMD", "proxer", "--version"]
      interval: 30s
      timeout: 5s
      retries: 3

---

Kubernetes Health Probes

Use the fixed health endpoints when a platform can probe HTTP paths:

/__proxer__/health/live
/__proxer__/health/ready

The control endpoint is also fixed:

/__proxer__/control

---

Environment Variables

The server can be configured with PROXER_ environment variables:

docker run --rm -p 8080:8080 \
  -e PROXER_DOMAIN=proxy.example.com \
  -e PROXER_TOKEN=dev-token \
  -e PROXER_TRUSTED_PROXIES=loopback,private \
  ghcr.io/tinyrack-net/proxer server

Use --trusted-proxy flags or PROXER_TRUSTED_PROXIES when the container receives traffic from a reverse proxy you control.