unraid888

Many thanks.

Worked like a charm, thank you very much! Can I just clarify a small point please, in the "cookie_domains" field, do you put your top level domain url (ie mydomain.com) or do you list each page you want to protect (ie nextcloud.mydomain.com, bitwarden.mydomain.com etc)?

You're a gent, thank you very much!

Hi, Yes, those are the only two files I have in that folder; emails.cfg and oauth2_proxy.cfg Regards.

Hello, I have just followed these two guides; https://technicalramblings.com/blog/cloudflare-fail2ban-integration-with-automated-set_real_ip_from-in-nginx/ & https://technicalramblings.com/blog/blocking-countries-with-geolite2-using-the-letsencrypt-docker-container/ Almost everything seems to be going fine, with no errors that I haven't been able to fix with all the support on this forum. I say almost, as when I try a VPN and connect to my server via another country, I'm still able to get through, I'm not blocked and the access is reported as the same as my "non-VPN" attempts in the logs? I've registered with MAXMIND, entered the key and downloaded the GeoLite2.mmdb file, ensuring that it is saved in the right location. On a side note, sendmail-whois.local still needs some amendment by me, however I wanted to focus on actually securing my site before I continued attempts with notification. I've attached four screenshots below of the amendments I've made to the various config files within SWAG, in the hopes someone can point out what I'm doing wrong. Excellent work by the way on this container, its impressive how much work has gone in to it, including the SWAG support page. In the meantime I'll continue to read through this forum for tips, I'm up to page 19 so far. Regards. Here is the current reported state of my jail list (if it helps); ***Edit - Whilst I'm trying to get to the bottom of my above problem I wanted to ask yourselves (@linuxserver.io @saarg @aptalca @CHBMB) a question as you clearly know what you are talking about (I'm up to page 72 of this thread, so much useful information!) What router would you recommend that works best with SWAG in a home setting? Pfsense or Ubiquiti? Apologies if this should be on its own thread, I just thought I would tag it on to my question above as my number one requirement of a new router will be that it fully supports and compliments SWAG.

Hi, Many thanks for replying. I have just the one email address in the emails.cfg file, and it's the same one that I use to login to my Google account to obtain the client ID. ***Edit - Just to add a little further, I've completed up to step 12 of "OAuth2 Proxy Setup", however it is here that I am getting stuck as the container will not start, preventing me from moving on to the next step of "configuring NGINX".

Thanks for clarifying, appreciated. I'll focus my attention over on the NginxProxyManager support page, hopefully this is an easy fix. 👍

@saarg I may not have your level of expertise when it comes to this sort of thing, but it was a genuine question, asked with sincerity so that I could fix my problem. I won't take it personally as I've noticed you take a similar tone with other individuals on this forum, but please remember, we all started somewhere.

Hi, I was hoping someone could give me a nudge in the right direction. I'm trying to setup OAuth2 and have followed the guide here; OAuth2 Guide My problem however is that I am receiving a "Failed to load config: unable to load config file: While parsing config: (1, 1): unexpected token" error. I've gone over the config file several times and I can't see where I have formatted it incorrectly. For reference, I am trying to set this up for my remote access to bitwarden. Once I get it working I hope to expand it to my other containers. I have included some screenshots below in the hopes that someone can point out my mistake. Many thanks.

Hi, Apologies, I should have clarified, I updated the MariaDB container then I started getting the above errors in NginxProxyManager. The screenshot (from NPM) was just to show the errors and how they were formatted. I assumed that the errors were purporting to be caused by MariaDB somehow, however I could well be wrong. I have raised an issue on GitHub with the NPM team, incase the error was from their end, however I wanted to enquire here also as the errors mentioned difficulty in connecting to MySQL.

Hi, I have just updated the container however my reverse proxy has gone down reporting three errors relating to MariaDB; 2020-09-13 6:11:54 0 [ERROR] Could not open mysql.plugin table. Some plugins may be not loaded 2020-09-13 6:11:54 0 [ERROR] Can't open and lock privilege tables: Table 'mysql.servers' doesn't exist 2020-09-13 6:11:54 0 [ERROR] Fatal error: Can't open and lock privilege tables: Table 'mysql.user' doesn't exist Any advice would be greatly appreciated. ***Edit*** I have tried removing; ib_logfile0 ib_logfile1 & aria_log_control And restarting the service however that did not work, neither did downgrading the container image.

Hi, Can I ask if and how people are implementing Fail2ban alongside NginxProxyManager? I understand that it is not part of the NPM docker image, and my searching has come up short in identifying a way to run Fail2ban as a standalone entity on Unraid. Any suggestions would be greatly appreciated. Kind regards.

Hahaha cheers. 👍

Many thanks for clarifying. Looking around the sabnzbd forums and there is mention of a Deobfuscate.py script that may be able to help with renaming obsfucated files. Would you think that any sort of intervention by sabnzbd post-download would throw a spanner in the works and prevent sonarr from doing its thing with renaming/moving/sorting? Overall, sonarr works well, and so I don't want to rock the boat if it is just the odd series/file that I have to manually correct, however if I can make life easier then I will. 😁

On the subject of mappings, does it matter that sabnzbd has its media folder set within the docker itself differently from radarr and sonarr? Looking at sabnzbd, it is formatted as; /mnt/media whereas radarr and sonarr have; /media

Hi, Many thanks for your advice. I realigned sab, radarr and sonarr and tried a fresh download, unfortunately the same thing has happened. It finishes, is unpacked as an obsfucated file, placed into a folder and moved to the completed folder, however there it sits. I've tried forcing Sonarr to complete another scan, but that does not help. For reference, below is the Sabnzbdvpn log output regarding this latest file;

Hi, I was hoping that someone could give me some advice on an issue I'm having with Sonarr. Mainly it has been working well, however I'm having issues with obsfucated file names, specifically with Sonarr leaving them in the downloads folder and not processing them. As you can see from the screenshots below, my folder mappings are correct (or I think they are) and Sabnzbdvpn is set to not sort the downloads, I've left that to Sonarr/Radarr. I've also included a snapshot of the relevant part of the Sonarr log. I can manually go and rename them, move them about and it works, but I want to correct the problem as it is very time consuming. Many thanks.

Hi, I was hoping that someone could give me a steer in the right direction. I have NextCloud setup and everything is great, when I access it via proxy, however when accessing locally, I get a Strict-Transport-Security error. Its not a massive problem, however I would like to learn why this is happening. For reference, I've added "add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload;" always;" to the "default.conf" in NextCloud but that hasn't made any difference. Regards. When accessing locally; Accessing via proxy; Default.conf file;

Hi, Thanks for the suggestion, I hope to be able to go down that route. Just need to find a way to get fail2ban up and running now. 👍

Hi, I have the below Dockers running and everything seems to be going well. I checked in on my Cloudflare dashboard and was surprised/shocked at the amount of attempts to access my site there have been. USA, Germany, Brazil, all sorts, from all places. Now I don't know how many of these are genuine or are some sort of "bot" for backend systems scouring the Internet, however regardless, I want to ensure that I do all that I can to protect my server. I have utilised all of Cloudflares services to help, such as geoIP blocking, but I want to cover all bases. I only have three ports open, 80, 443 and one for my WireGuard VPN. 80 and 443 are running behind NginxProxyManager and there is nothing in my unRAID logs to cause me any concern, at present. I wanted to use Fail2Ban that was incorporated into Linuxserver/Letsencrypt however I have (as of yesterday) made the move over to NginxProxyManager and they do not include it unfortunately. I am still very much the unRAID novice, and have looked around for something to meet my needs however I have come up short. Is there anyone whom could point me in the right direction please? Many thanks. P.S. I'm currently watching the film "Snowden" and I want to unplug my server from the Internet. 🤣

Another excellent release, thank you! Worked first time.

Hi, Just wanted to stop by and say thanks to @Djoss for this container, I've found it much easier to use as my knowledgebase regarding Nginx is limited. I've managed to setup Bitwarden, Droppy, Radarr, Sonarr and NextCloud, and everything has worked great. I'm even getting a complete clean security bill of health in NextCloud which I never managed with Letsencrypt (however no disrespect to the Linuxserver guys, it will have been down to my lack of understanding). For reference, the only things I had to do in order to transition from Letsencrypt/Swag to Nginx Proxy Manager were; *Delete all prior certificates generated by Letsencrypt, *I haven't had any issues having NPM on its own network rather than Bridge, *Disable Cloudflare proxy protection for each of my subdomains, and *Add my NextCloud domain to the nextcloud config file, under "trusted domains". Keep up the great work!

Conversion details on Linuxserver/Swag; (https://hub.docker.com/r/linuxserver/swag)

Hello, Further to my last post, I have taken out a trial with Mullvad. I am having difficulties however in getting DelugeVPN and SabnzbdVPN to work with the change of VPN provider. I've followed the advice quoted above, however both DelugeVPN and SabnzbdVPN fail to load and the logs gives the following error; I've attached two screenshots below of my ovpnfile (the only change to within the file are the additional two lines at the bottom); Any assistance would be greatly appreciated. ***EDIT - Well, I was reading @binhex VPN faq and decided to try copying the two "pull-filter" lines directly from his page and copying that into the config.....and that seems to have done the trick. I'm not entirely sure how as they both look exactly the same from what was suggested above, however I have been wracking my head for the past few hours so the error is probably right there in front of me. 😂

Hello all, Long time NordVPN user however after reading on the forums, specifically SabnzbdVPN and DelugeVPN topics, that a lot of people had positive experience with AirVPN and so I thought I would give it a try. Upto now I'm happy with the speed increase I am seeing. My issue, or two I should say are; 1) In SabnzbdVPN I am satisfied that the vpn is being utilised however when I check my settings, it reports that "Public IPv4 address" and "Nameserver / DNS Lookup" as both "Connection failed!" I have attached a screenshot below for reference. 2) Secondly, I created a config file for Vienna and provided that to SabnzbdVPN, and everything is fine. However when I supply the same config file to DelugeVPN, both programs fail to utilise the VPN config credentials at the same time. If I only use one at a time however, or a different config for each program, then they both run fine. For reference NordVPN allowed me to utilise the same config file for multiple applications, each app utilising a "user", and so as long as I did not have more than six apps running, there would be no issues. Does anyone know if AirVPN require a seperate server per application? Checking the SabnzbdVPN log shows the following error in yellow, however it still seems to work, as long as both apps have a different config file; Many thanks in advance and I hope I can clear up these couple of teething issues as I would very much like to make my move to AirVPN permanent. Kind regards. ***EDIT - I might have to hang fire on moving over to AirVPN, I've just tried to log back into my account and it states I'm banned from their entire site! I don't think I've ever been banned from anything before. Not even two hours of use, and I only tried SabnzbdVPN and DelugeVPN, from the same computer. 😂 ***EDIT two - Well, AirVPN customer service got back to me and apologised for the mix up and reinstated my access. I think I'll give them a miss and try Mullvad instead, if they are this prone to mistakes. On a side note, I've managed to get Mullvad working with SabnzbdVPN. I'm currently using ovpn files from Mullvad however they also supply WireGuard config files. Would these work with SabnzbdVPN somehow?