Jump to content

syniex

Members
  • Posts

    39
  • Joined

  • Last visited

Posts posted by syniex

  1. Is there a way to make to use letsencrypt as reverse proxy from gitlab-ce?

    My router doesn't allow https(443) port to be open, so i forward it to custom port,

     

    so i added to the default configuration "return 301 https://$host:{PORT}$request_uri;" <---- under the http server so it redirect everything to the https with my custom port

    but it doesn't seems to work with gitlab.

     

    when i try to use the sub-domain i get this url: "https://git.{user}.duckdns.org/users/sign_in" without the custom port.

     

    here is the configuration i added to support gitlab:

     

    server {
        listen 443 ssl;

        server_name git.*;

        include /config/nginx/ssl.conf;

        client_max_body_size 0;

        # enable for ldap auth, fill in ldap details in ldap.conf
        #include /config/nginx/ldap.conf;

        location / {
            # enable the next two lines for http auth
            #auth_basic "Restricted";
            #auth_basic_user_file /config/nginx/.htpasswd;

            # enable the next two lines for ldap auth
            #auth_request /auth;
            #error_page 401 =200 /login;

            include /config/nginx/proxy.conf;
            resolver 127.0.0.11 valid=30s;
            set $upstream_gitlab gitlab;
            proxy_pass http://$upstream_gitlab:9080;
        }
    }

     

    Is there something i should change?

  2. I'm having problems with setting up the https to work,

     

    Always getting "ERR_CONNECTION_REFUSED"

     

    but inside the lan i can access the domain with port 444.

    I did port forwarding from 443 to 444 on my Router, but always getting connection refused

     

    on unraid syslog i see this error: "2018/05/25 13:26:44 [error] 6731#6731: *47077 connect() to unix:/var/tmp/letsencrypt.sock failed (111: Connection refused) while connecting to upstream, client: 172.27.224.3, server: , request: "GET /dockerterminal/letsencrypt/ws HTTP/1.1", upstream: "http://unix:/var/tmp/letsencrypt.sock:/ws""

     

    any help will be appreciated 

×
×
  • Create New...