portainer-management

Deploy Portainer CE with Docker Compose and secure it via OAuth2 Proxy.

Updated Mar 2, 2026
One-click install
npx skills add https://github.com/MassimilianoPili/claude-code-config --skill portainer-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: portainer-management
Source: https://github.com/MassimilianoPili/claude-code-config/tree/main/skills/portainer-management
Command: npx skills add https://github.com/MassimilianoPili/claude-code-config --skill portainer-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide to deploying and managing Portainer CE, a Docker container management UI, ensuring secure access through OAuth2 Proxy and enabling features like subpath deployment and WebSocket support.

Core Features & Use Cases

  • Portainer Deployment: Detailed Docker Compose configuration for Portainer CE.
  • Secure Access: Integration with OAuth2 Proxy for authentication via Keycloak SSO.
  • Advanced Configuration: Guidance on subpath deployment (--base-url), Nginx reverse proxy setup, and WebSocket support for real-time features.
  • Visitor Access: Instructions for setting up read-only access for guest users.
  • Troubleshooting: Common issues and their solutions related to Portainer, Nginx, and OAuth2 Proxy.

Quick Start

Use the portainer-management skill to restart the Portainer service using its Docker Compose configuration.

Frequently Asked Questions about portainer-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy Portainer CE with Docker Compose?

Deploy Portainer CE by configuring a Docker Compose file that sets up the container management UI with necessary volumes and network settings. This Skill provides the Docker Compose configuration needed to launch the Portainer service.

How do I configure Nginx reverse proxy for Portainer subpath deployment?

Configure Nginx as a reverse proxy to handle Portainer subpath deployment using the `--base-url` flag. This setup ensures correct routing and includes WebSocket support for real-time container management features.

Can I secure Portainer access using OAuth2 Proxy with Keycloak SSO?

Yes, you can secure Portainer by integrating OAuth2 Proxy to handle authentication via Keycloak SSO. This Skill guides you through the configuration process to protect the Docker management UI.

How do I set up read-only RBAC visitor access in Portainer?

Set up read-only access for guest users by configuring Role-Based Access Control (RBAC) within Portainer. This allows visitors to view Docker resources without modification permissions.

Why does Portainer WebSocket support fail behind Nginx and OAuth2 Proxy?

Portainer WebSocket support fails when Nginx or OAuth2 Proxy configurations do not properly upgrade HTTP headers. This Skill covers troubleshooting steps to resolve common connectivity and real-time feature issues.

Do I need Keycloak to use OAuth2 Proxy for Docker container management?

Keycloak is used as the SSO provider in this configuration, but OAuth2 Proxy can integrate with other identity providers. The Skill focuses on the Keycloak SSO setup for securing the Docker management UI.