[[Support] Linuxserver.io - SWAG - Secure Web Application Gateway (Nginx/PHP/Certbot/Fail2ban)]

I've started looking into the details you've suggested. I had read the readme and tried those things but had no luck and because I felt like I was just compounding possible solutions I tried to return everything back to default.

 

Before I post anymore details here I just realised my ISP blocks both ports 443 and 80 on inbound connections. I wonder if this is a fundamental problem or should I still be able to get this to work?

 

 

EDIT: I contacted my ISP and had them unblock the ports they were blocking. I can now see the 443 as open using http://canyouseeme.org/ and am getting a certificate exist feedback from https://www.sslshopper.com/ssl-checker.html

There still seems to be some errors so I've got more work to do but progress. Shame I probably wont have much time over the next few days being the holidays and all. 

[[Support] Linuxserver.io - SWAG - Secure Web Application Gateway (Nginx/PHP/Certbot/Fail2ban)]

I have tried for 3 days to get access to NextCloud on my unRAID working from outside my network. Here's were I stand:

 

I have NextCloud up and working, I can access it from a browser on a connection within my own network using unraidIP:444

I can also access NextCloud from the android app when I'm connected to my own network using unraidIP:444 in the NextCloud app "Server address https://..." field.

 

I have LetsEncrypt setup and working (I think). I using DuckDNS and the duckdns validation method. Here is the log from my LetsEncrypt.

 

-------------------------------------
_ ()
| | ___ _ __
| | / __| | | / \
| | \__ \ | | | () |
|_| |___/ |_| \__/


Brought to you by linuxserver.io
We gratefully accept donations at:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------

User uid: 99
User gid: 100
-------------------------------------

[cont-init.d] 10-adduser: exited 0.
[cont-init.d] 20-config: executing...
[cont-init.d] 20-config: exited 0.
[cont-init.d] 30-keygen: executing...
using keys found in /config/keys
[cont-init.d] 30-keygen: exited 0.
[cont-init.d] 50-config: executing...
Variables set:
PUID=99
PGID=100
TZ=Australia/Sydney
URL=workdamnit.duckdns.org
SUBDOMAINS=wildcard
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=true
DHLEVEL=2048
VALIDATION=duckdns
DNSPLUGIN=
EMAIL=*******@gmail.com
STAGING=

2048 bit DH parameters present
SUBDOMAINS entered, processing
Wildcard cert for only the subdomains of workdamnit.duckdns.org will be requested
E-mail address entered: ******@gmail.com
duckdns validation is selected
the resulting certificate will only cover the subdomains due to a limitation of duckdns, so it is advised to set the root location to use www.subdomain.duckdns.org
Certificate exists; parameters unchanged; starting nginx
[cont-init.d] 50-config: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
Server ready

I've tried a lot of different things to test that my DuckDNS is working but I'm not sure that it's actually doing what it's suppose to. If, when connected to my home network, I use workdamnit.duckdns.org it takes me to my modem/router login page. But using it outside my home network gets me nowhere.

 

My NextCloud config.php file looks like this:

<?php
$CONFIG = array (
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'datadirectory' => '/data',
  'instanceid' => 'ocd07n9t02sn',
  'passwordsalt' => '********',
  'secret' => '*********',
  'trusted_domains' =>
  array (
    0 => '192.168.0.142:444',
    1 => 'nextcloud.server.com',
  ),
  'overwrite.cli.url' => 'https://192.168.0.142:444',
  'dbtype' => 'mysql',
  'version' => '13.0.1.1',
  'dbname' => 'nextcloud',
  'dbhost' => '192.168.0.142:3305',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => '********',
  'dbpassword' => '*******',
  'installed' => true,
);

I've tried so many different approaches, test, changes that I feel like the solution might be masked by a change I've made prior. Could someone give me a hand to fault find this? I've feel a little out of my depth but really want to make this happen.