It's a bit odd to use a custom docker image, rather than the one maintained by nginx Inc though:
https://github.com/signalapp/Signal-TLS-Proxy/blob/main/ngin...
Vs
https://github.com/nginxinc/docker-nginx
For one, this is 5 versions behind (1.18 vs 1.23).
In general seems caddy or haproxy might be a better fit - but nginx is a perfectly fine choice I suppose.
> It's a simple way of running something quickly and without touching the rest of your system
Providing a statically linked binary is even simpler, without all that extra complexity that comes with docker.
Anyway, the proxy is just an nginx with a custom config file. You can check that file and just add it yourself to an nginx you manage, probably with little changes.
https://github.com/signalapp/Signal-TLS-Proxy/blob/main/data...