server.local not safe

[Braulio]

How can I resolve this?
I wish this message didn't appear.
Tks guys...

[dboonthego]

The cert needs to be signed by a CA the browser trusts.  Your options (to avoid seeing warning) are to turn off SSL or you can apply for a free myunraid.net Let's Encrypt certificate.  In your present configuration, the connection is still encrypted, just not trusted.

[Braulio]

On 8/16/2023 at 11:17 PM, dboonthego said:

The cert needs to be signed by a CA the browser trusts.  Your options (to avoid seeing warning) are to turn off SSL or you can apply for a free myunraid.net Let's Encrypt certificate.  In your present configuration, the connection is still encrypted, just not trusted.

Where can I a free myunraid.net Let's Encrypt certificate?

[ljm42]

9 minutes ago, Braulio said:

Where can I a free myunraid.net Let's Encrypt certificate?

 

see https://docs.unraid.net/unraid-os/manual/security/#securing-webgui-connections-ssl

[Braulio]

On 8/24/2023 at 4:41 PM, ljm42 said:

 

see https://docs.unraid.net/unraid-os/manual/security/#securing-webgui-connections-ssl

Gentlemans, say Hi!...lol

I'm still lost as to how https (SSL) works.
I will enumerate the questions to make it easier to help.

 

1) Secure Connection
A) I read the unraid manuals and saw that if I access my server at https://my_ip.my_id.myunraid.net it already has a secure connection (https)

 

B) If you access name_server.local it does not have a secure connection.

 

I understood, the option A, unraid provides SSL and the option B I have to install an SSL.

 

 

2) VPN
My difficulty is that I'm using ZeroTier, and when I access it through option A or B it doesn't connect through SSL.
Even using option A doesn't connect https , because the network's IP changes      https://my_ip_zerotier.my_id.myunraid.net

 

 

3) Docker Vaultwarden
I installed this docker and it won't let me connect to webUI without a secure connection (https)

 

 

4) I can't figure out why it works via https (SSL).
I'm asking for help again because I'm a little confused and lost.

 

Thanks in advance.
And come and discover Brazil.
Hugs to everyone
I am Braulio....lol

[dlandon]

How do you have Local TLD set?

 

[ljm42]

10 hours ago, Braulio said:

2) VPN
My difficulty is that I'm using ZeroTier, and when I access it through option A or B it doesn't connect through SSL.
Even using option A doesn't connect https , because the network's IP changes      https://my_ip_zerotier.my_id.myunraid.net

 

VPNs like this add a major layer of complication.

 

If you are connected over an encrypted VPN tunnel there is no need for https. Just use http://ipaddress  (if "Use SSL" is set to no) or https://ipaddress (if "Use SSL" is set to yes. In this case you will also need to ignore the browser warnings)

 

10 hours ago, Braulio said:

3) Docker Vaultwarden
I installed this docker and it won't let me connect to webUI without a secure connection (https)

 

Docker containers are not proxied through Unraid, so Unraid's certificate has no bearing on a container's certificate. You'd want to ask for help in the forum thread for that docker container.

 

10 hours ago, Braulio said:

4) I can't figure out why it works via https (SSL).
I'm asking for help again because I'm a little confused and lost.

 

Now I'm confused : ) what is the "it" that we are talking about here?

[Braulio]

12 hours ago, dlandon said:

How do you have Local TLD set?

 

I'm confused about how it works

[Braulio]

12 hours ago, ljm42 said:

Now I'm confused : ) what is the "it" that we are talking about here?

It = docker Vaultwarden

[ljm42]

8 hours ago, Braulio said:

It = docker Vaultwarden

Docker containers are not proxied through Unraid, so Unraid's certificate has no bearing on a container's certificate. You'd want to ask for help setting up that container in the forum thread for that container.

 

8 hours ago, Braulio said:

I'm confused about how it [Local TLD] works

 

The local TLD is used for URLS, such as:

  http://server.local

  https://server.local

The https url will use a self-signed certificate which causes browser warnings. But other than that it is fine.

 

If you had your own domain you could enter "mydomain.com" in that field and then the urls would be:

  http://server.mydomain

  https://server.mydomain

This also requires you to have DNS and provide your own certificate. More details in the docs provided earlier

 

Separate from that, once you provision a myunraid certificate you can access the server via a unique myunraid.net url using a valid certificate that we provide.