aptalca

You shouldn't need to force a renewal. Auto renewals are attempted daily. Check the log/letsencrypt folder to see what's going on

Start here:

Map a new folder in the container settings, say /mnt/user/www on the unraid side and /www on the container side. Then in your nginx site config, set the root directive to /www

I have 2 openvpn servers set up on mine. One on the router (pfsense), which is my main connection, and another on unraid as a docker container, which is my backup. I also have chrome remote desktop enabled on a windows vm on unraid as a backup to the backup

For the logrotate, you can map it as a path so container side it will be /etc/logrotate.d/fail2ban and host side would be wherever your custom file is at on your unraid. For the actions and filters, just put your new configs into the respective folders under /config as they are already made available for user customization. I used recidive in the past where regular bans were short lived (5mins) but if an ip got banned 3 times in a 10 hr period, they would be banned for a whole week. Never did anything longer than that.

I personally think it's a bad idea to expose the openvpn-as gui. If someone brute forces it, they can create their own vpn user and get on to your lan

Why are you trying to modify the logrotate config file?

Also, forward the port 443 and then go to https://www.yourcustomsubdomain.duckdns.org and if you see the placeholder page, letsencrypt is working fine. Then you can set up nextcloud reverse proxy

Sounds like somebody didn't read the readme. Read the readme under the folder /config/nginx/proxy-confs and it will tell you how to enable the preset proxy confs (hint: you just rename the file) Each proxy conf also tells you what you need to change (if any) in the external app.

No naxsi package module in alpine 3.8 repo

I believe you can just enable in the ssl.conf

Not sure about security but the main benefit of ldap is you can have different authentication levels for users and groups easily

?? The main advantage of bridge is to be able to map whatever port you want. Bridge vs br0 vs host makes no difference for outside access

Remove that bit from nginx.conf, open the default site config and you'll see the message about https redirect at the top

Why don't you put all of them on bridge instead?

Sounds like you just had to retrace your steps to identify the issue. Glad it works now

This isn't the thread for the video guide so you'll have to provide more info on what exactly you did

You can use dnschecker.org to see propagation

Are you using the preset proxy confs?

Set an A record for cdkauffmann.com and set it to your IP address

On the surface it looks about right. Actually you had to repeat the ssl info because it is in a different server block.

Glad to hear it worked

Go to WordPress admin, settings, general and you'll see two fields for wp address and site address. My guess is they are set up with www

That seems totally stock. I'm assuming your wordpress is being served in the www folder. You must have a redirect in wordpress. Did you set the website url as www.domain.com in wordpress settings? There could also be browser cache when 301 redirects are involved. Try a new browser or incognito

It's called default It's under /config/nginx/site-confs