[[Support] binhex - DelugeVPN]

On 2/27/2021 at 3:16 AM, TexasDave said:

For folks having issues - I was as well - do read the FAQ carefully. I tend to skim or rush these things and pay the price. I had set this up ages ago and things have changed - at least it looks that way to me anyways. I used the original SPace Inavder video ages ago and then over the years added wireguard, new PIA servers, etc.
 

• Per the FAQ, I had to remove the ports from the containers runing into DelugeVPN (new for me)
• Expose the ports on DelugeVPN (I did have this)
• Add the "ADDITIONAL_PORTS" variable (new for me)

After struggling with it last night and downgrading to proove I could get it to work, coffee and slowing down and reading the FAQ very closely sorted me. 🙂

I have a simple setup as I just run NZBGet and Hydra2 though the VPN so your mileage may vary....

This was my fix, thank you!

[Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber]

Oh okay, guess I don't understand the provisioning process too well.

 

I tried creating an entry at C:\Windows\System32\drivers\etc\hosts on the PC I'm using to access unraid

Quote

192.168.2.1 7064337de712ccf69be1c7f7762091b345f6cf66.unraid.net

 

It doesn't take ~30 seconds to fail like before; it responds in less than a second but I still get the same error.  I've verified my machine resolves the address properly.

 

So frustrating!!! 

[Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber]

So I've tried resorting to the last recommendation under help to just make an entry for unraid.net in the hosts file, and it STILL gives me an error when trying to provision.

 

 

 

[Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber]

My current path for the server is (Unraid Server) -> (Dumb switch - Eth1) -> (EdgeRouter 4) -> (ONT)

 

I have hairpin/loopback NAT disabled

 

 

I do have a masquerade for outbound traffic to VLAN eth0.0, not sure if that qualifies as a double NAT.

 

Edit: I got my set up working without the masquerade, still no luck...

[Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber]

Here's my diagnostics

 

I appreciate your time

plex-diagnostics-20201120-1450.zip

[Cannot provision SSL certificate (error 403) with Ubiquiti Edgerouter 4 & ATT Fiber]

I've spent several hours over several days trying to fix this, and I've found other posts on these forums about the problem but none of them have fixed my problem.

 

When I try to click the provision button under 'Management Access' for an SSL certificate I get the following error.

 

This resolves to 192.168.1.91 in a ping

 

I've tried to follow the suggestion in the help section of unraid, and also from the forums by specifying 'rebind-domain-ok=/unraid.net/' to allow dns rebinding on that address.

 

You can see I also specify the google DNS servers, which I've confirmed are being used

 

I'm completely stumped...  anybody have additional resources/suggestions I can follow?