Nem

Members
  • Posts

    177
  • Joined

  • Last visited

Posts posted by Nem

  1. I thought about doing something like that, but the way I have nginx-letsencrypt set up is all port 80 traffic it receives gets automatically redirected to 443

     

    Furthermore, a splitting traffic by protocol alone would lead to problems. lets say on my router I forward 80 to nginx (personalsite.com) and 443 to nginx-letsencrypt (proxysite.com). Both domains will point to the same IP. So if someone goes to https://personalsite.com, they will be incorrectly taken to the proxy site, and if someone goes to http://proxysite.com they will be taken to personal site because of how the ports are forwarded...unless theres a way in nginx config to redirect the user back to the "other" site or something?

  2. I personally don't see any issues about running a webserver on port 443 of unraid as long as it is secured for the known vulnerabilities.

     

    Op is not suggesting putting the unraid gui on the Internet, but only proxies for other containers (I'm assuming secured with passwords over ssl since he is using letsencrypt)

     

    Regarding op's question, Unfortunately the nginx-letsencrypt container can only handle one domain at the moment and that domain has to be accessible in port 443. So a second container would not work because it would need to be accessed at port 443 (on the router) as well.

     

    So unless your router has the ability to forward requests on port 443 to different local ip's based on the destination domain,  it wouldn't work.

     

    However, if you handle the ssl certs manually on one of the containers, then it could work with nginx forwarding and different ports.

     

    So nginx-letsencrypt is running on 443, but for my personal website I dont actually need 443 and can run it without SSL. The site is entirely static and doesnt require the user to send/receive any personal data to the server. In other words I dont actually need a SSL cert for the personal site. Does this change things at all?

  3. I'm currently using the Nginx-letsencrypt app, where the nginx server is used as a reverse proxy for all of my other applications. I have a domain name pointing at the server so everything can be accessed with www.example.com/couchpotato for example

     

    I also currently run my personal website on digital ocean, but my credit just expired and I'm looking for alternative ways to host it and thought that I could host is on my unraid server through a new docker container

     

    Is it possible to set up a second nginx container to host my website such that when people go to www.example.com they'll get taken to the Nginx-letsencrypt container and hit my server apps, but when they go to www.personalwebsite.com they'll be taken to my new second nginx container and be taken to my personal website instead? So both domains will point to my server IP, but traffic will be redirected to the appropriate container depending on the domain

     

    Ideally I'd like to do this with a second container rather than trying to do everything within Nginx-letsencrypt container so I can keep things separated

  4. I'm trying to install privoxy directly from dockerhub because the only one I could find an unraid template doesn't expose the config file.

     

    After install, the container doesn't start. In my unraid log I see:

     

    Apr 17 05:59:26 Server php: /usr/local/emhttp/plugins/dynamix.docker.manager/scripts/docker 'start' 'privoxy'

    Apr 17 05:59:26 Server kernel: device veth79efe2e entered promiscuous mode

    Apr 17 05:59:26 Server kernel: docker0: port 6(veth79efe2e) entered forwarding state

    Apr 17 05:59:26 Server kernel: docker0: port 6(veth79efe2e) entered forwarding state

    Apr 17 05:59:26 Server kernel: docker0: port 6(veth79efe2e) entered disabled state

    Apr 17 05:59:26 Server avahi-daemon[1981]: Withdrawing workstation service for veth533af8d.

    Apr 17 05:59:26 Server avahi-daemon[1981]: Withdrawing workstation service for veth79efe2e.

    Apr 17 05:59:26 Server kernel: device veth79efe2e left promiscuous mode

    Apr 17 05:59:26 Server kernel: docker0: port 6(veth79efe2e) entered disabled state

     

    I'm trying with this image: https://hub.docker.com/r/vimagick/privoxy/

    I've tested some of the others on dockerhub but they all result in the same log messages

     

    How can I further diagnose this problem and figure out whats going on?

  5. I'm considering installing the graylog container just to see what its like. Could anyone explain what gets stored in the following volumes, how big each directory tends to get, and whether each should be stored on the cache drive or a user share?

     

    /var/opt/graylog/data

    /var/log/graylog

    /opt/graylog/plugin

  6. For any of those interested, and haven't done so themselves, I took jonp idea of Plex Transcoding and applied the same idea to Emby. I added container volume /transcode to /tmp/emby host path for Dockers Volume mappings. Afterwards I then had to:

    [*]ssh into my unRAID: #: chown nobody:nobody /tmp/emby

    [*]open Emby webui >> go to: /web/encodingsettings.html

    [*]change "Transcode temporary path " to: /transcode

     

    Note: one downside, if you reboot unRAID the /tmp/emby folder's ownership changes to root, so you have to go in and change ownership back to nobody.

     

    #edited for better grammar#

     

    thats awesome, had no idea that was possible. is there some bash script that can be run from within the emby docker, when emby starts up, to change the folder ownership? Or can that only be done directly through ssh into unraid? Be nice if there was a way around having to manually reset ownership every reboot

  7. I have that same problem too

     

    I fixed it earlier by clicking "Update Applications", and it told me one of the repos could not be updated. Everything seemed to work OK. But now, a few hours later, same problem comes up and I cant install, see, or search for anything in the app list

  8. I'm trying to get privoxy working with polipo, which would require me to point privoxy at polipo in the config. I notice in the template description: "Note that this container does not save any changes you make. So don't bother configuring it"

     

    Given that, is there any way to get the 2 working together? As it sounds like anything I add to the privoxy conf will not be saved. Or would it be more advisable to try to find something on dockerhub instead where I can edit the conf file?

  9. I'm trying to set up polipo so that it works for all the computers on my network. Looking at the polipo FAQ, it seems I would have to change/add the line:

     

    allowedClients = 127.0.0.1, 192.168.187.0/24

     

    I looked in the conf file that came with this docker and I see 192.168.0.0/16 in there, does that already capture all of the machines on my network?

     

    If not, can I change the conf file to the line above and have the config stay persistent across docker updates?

  10. I just signed up for a 3 day trial with airvpn and I can't get it to work with this docker

     

    I followed all of the instructions here: http://lime-technology.com/forum/index.php?topic=45812.0

     

    and copied over my ovpn file. It didn't work, so I tried to get another ovpn file from the config generator but that isn't connecting either. As of right now I cant get into the webgui or the desktop client

     

    This is what I see in my log:

     

    [info] Env var PUID defined as 99
    [info] Env var PGID defined as 100
    [info] Permissions already set for /config
    [info] Starting Supervisor...
    2016-03-28 23:39:32,465 CRIT Set uid to user 0
    2016-03-28 23:39:32,465 WARN Included extra file "/etc/supervisor/conf.d/delugevpn.conf" during parsing
    2016-03-28 23:39:32,467 INFO supervisord started with pid 12
    2016-03-28 23:39:33,469 INFO spawned: 'privoxy' with pid 15
    2016-03-28 23:39:33,469 INFO spawned: 'start' with pid 16
    2016-03-28 23:39:33,470 INFO spawned: 'webui' with pid 17
    2016-03-28 23:39:33,471 INFO spawned: 'deluge' with pid 18
    2016-03-28 23:39:33,475 DEBG 'privoxy' stdout output:
    [info] VPN is enabled, checking VPN tunnel local ip is valid
    
    2016-03-28 23:39:33,475 INFO success: privoxy entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
    2016-03-28 23:39:33,475 INFO success: start entered RUNNING state, process has stayed up for > than 0 seconds (startsecs)
    2016-03-28 23:39:33,475 DEBG 'privoxy' stdout output:
    [info] checking VPN tunnel local ip is valid...
    
    2016-03-28 23:39:33,476 DEBG 'deluge' stdout output:
    [info] VPN enabled, configuring Deluge...
    
    2016-03-28 23:39:33,476 DEBG 'deluge' stdout output:
    [info] checking VPN tunnel local ip is valid...
    
    2016-03-28 23:39:33,477 DEBG 'start' stdout output:
    [info] VPN is enabled, beginning configuration of VPN
    
    2016-03-28 23:39:33,483 DEBG 'start' stdout output:
    [info] VPN provider defined as airvpn
    [info] VPN config file (ovpn extension) is located at /config/openvpn/openvpn.ovpn
    /config/openvpn/AirVPN_Sweden_UDP-443.ovpn
    /config/openvpn/AirVPN_Switzerland_TCP-443.ovpn
    
    2016-03-28 23:39:33,483 DEBG 'start' stderr output:
    /root/start.sh: line 50: /config/openvpn/openvpn.ovpn
    /config/openvpn/AirVPN_Sweden_UDP-443.ovpn
    /config/openvpn/AirVPN_Switzerland_TCP-443.ovpn: No such file or directory
    
    2016-03-28 23:39:33,483 DEBG 'start' stdout output:
    [info] Env vars not defined for remote host, port and protocol, will parse existing entries from ovpn file...
    
    2016-03-28 23:39:33,484 DEBG 'start' stderr output:
    cat: '/config/openvpn/openvpn.ovpn'$'\n''/config/openvpn/AirVPN_Sweden_UDP-443.ovpn'$'\n''/config/openvpn/AirVPN_Switzerland_TCP-443.ovpn': No such file or directory
    
    2016-03-28 23:39:33,488 DEBG 'start' stderr output:
    cat: '/config/openvpn/openvpn.ovpn'$'\n''/config/openvpn/AirVPN_Sweden_UDP-443.ovpn'$'\n''/config/openvpn/AirVPN_Switzerland_TCP-443.ovpn': No such file or directory
    
    2016-03-28 23:39:33,492 DEBG 'start' stderr output:
    cat: '/config/openvpn/openvpn.ovpn'$'\n''/config/openvpn/AirVPN_Sweden_UDP-443.ovpn'$'\n''/config/openvpn/AirVPN_Switzerland_TCP-443.ovpn': No such file or directory
    
    2016-03-28 23:39:33,495 DEBG 'start' stderr output:
    cat: '/config/openvpn/openvpn.ovpn'$'\n''/config/openvpn/AirVPN_Sweden_UDP-443.ovpn'$'\n''/config/openvpn/AirVPN_Switzerland_TCP-443.ovpn': No such file or directory
    
    2016-03-28 23:39:33,499 DEBG 'start' stdout output:
    [crit] VPN provider remote gateway not defined, exiting...
    
    2016-03-28 23:39:33,499 DEBG fd 9 closed, stopped monitoring <POutputDispatcher at 47151743109960 for <Subprocess at 47151742974288 with name start in state RUNNING> (stdout)>
    2016-03-28 23:39:33,499 DEBG fd 14 closed, stopped monitoring <POutputDispatcher at 47151743110392 for <Subprocess at 47151742974288 with name start in state RUNNING> (stderr)>
    2016-03-28 23:39:33,499 INFO exited: start (exit status 1; not expected)
    2016-03-28 23:39:33,499 DEBG received SIGCLD indicating a child quit
    2016-03-28 23:39:34,500 INFO success: webui entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
    2016-03-28 23:39:34,500 INFO success: deluge entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)

     

    The only point at which i deviated from the guide was the vpn port. I looked in the ovpn file and instead of 1194 I see port 443

  11. Hi

     

    I have been using Newshosting as a VPN for about a year and decided to move to PureVPN as I got a good deal. I can get connected but nothing downloads even the checkmytorrentip. I am using a server that PureVPN states is not blocked for p2p so it should work.

    Any ideas?

    Attached is my supervisord.log

     

    Do purevpn support incoming ports? If not then your downloads will be slow at best. If they do support incoming ports then you will need to manually configure deluge to use it.

     

    How do you check whether a provider supports incoming ports? I've tried asking FrootVPN (for example), which incoming ports they use but they just told me the port for OpenVPN which is 1194

  12. I'm often on 2 different networks. One at school and one at home.

     

    When I'm at home I'd like to automount the SMB/AFP shares as I'm on the same network as my server. This is not the case when I'm at school. However, I have a VPN set up on my server so I can access the shares of my home network while I'm away.

     

    I think the methods outlined above will automount the shares if I'm on the home network and I log in to my laptop. But do they/is there a way to automount then when connecting through my VPN?

  13. I use both mac and windows computers on my network - are there any issues (is it recommended) with exporting a share as both SMB and AFP?

     

    I cant seem to find a way on my macbook to automount SMB shares without using something like controlplane, and I believe Macs can automount AFP shares, hence the reason for asking

  14. Has there been a change to this template recently? I can't seem to connect to it via deluge or the webui anymore

     

    I'm seeing this error in my log:

     

    2016-03-13 07:55:00,938 INFO success: webui entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
    2016-03-13 07:55:00,938 INFO success: deluge entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
    2016-03-13 07:55:02,245 DEBG 'start' stdout output:
    Sun Mar 13 07:55:02 2016 AUTH: Received control message: AUTH_FAILED
    
    2016-03-13 07:55:02,245 DEBG 'start' stdout output:
    Sun Mar 13 07:55:02 2016 SIGTERM[soft,auth-failure] received, process exiting
    
    2016-03-13 07:55:02,246 DEBG fd 9 closed, stopped monitoring <POutputDispatcher at 47726260263824 for <Subprocess at 47726260128152 with name start in state RUNNING> (stdout)>
    2016-03-13 07:55:02,246 DEBG fd 14 closed, stopped monitoring <POutputDispatcher at 47726260264256 for <Subprocess at 47726260128152 with name start in state RUNNING> (stderr)>
    2016-03-13 07:55:02,246 INFO exited: start (exit status 0; expected)
    2016-03-13 07:55:02,246 DEBG received SIGCLD indicating a child quit

     

    My year of PIA expired a few days back and I set up a new account (new user/pass). I've made sure that my user and pass are updated to the new one in the docker config page but I'm still getting the AUTH_FAILED message

     

    A few lines above that in the log is:

     

    2016-03-13 07:54:59,699 DEBG 'start' stdout output:
    Sun Mar 13 07:54:59 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this

     

    Is it possible that delugevpn is still trying to use my old user/pass? How do I reset it without reinstalling?

     

    A few posts back it was mentioned that setting VPN_REMOTE = nl.privateinternetaccess.com is ideal, but for the past year I've been using us-east.privateinternetaccess.com without a problem

     

    What could be the issue?

  15. If you mean within OVPN-AS settings, then TCP and UDP are standard, but admin UI port has been changed to 9431

     

    If you mean within the container for the docker, then there is no section for port mappings at all. When I talk about the webUI port number in container config, I'm talking about the 'webui' field within 'additional fields'. By default that is set to https://[iP]:[PORT:943]/, but I changed it to 9431 so I can access the UI from within unraid