March 20, 201511 yr Hi Everyone, I have Sonarr running smoothly and would like to access it from an external IP using SSL. The instructions appear straight forward, but I am unsure how to perform this in a docker environment: https://github.com/Sonarr/Sonarr/wiki/SSL I have toyed with the idea of setting up SSL on my Tomato router but I imagine this is overkill. Have any of you had luck with Sonarr and SSL in a docker environment?
March 20, 201511 yr Hi Everyone, I have Sonarr running smoothly and would like to access it from an external IP using SSL. The instructions appear straight forward, but I am unsure how to perform this in a docker environment: https://github.com/Sonarr/Sonarr/wiki/SSL I have toyed with the idea of setting up SSL on my Tomato router but I imagine this is overkill. Have any of you had luck with Sonarr and SSL in a docker environment? I'm rebuilding my website that has instructions on how to put Sonarr and a bunch of other stuff behind a SSL Reverse Proxy.
March 20, 201511 yr I have ssl set up on my tomato router, as well as ssh access, both work quite well
March 20, 201511 yr I have ssl set up on my tomato router, as well as ssh access, both work quite well So what my setup will do is allow you to go to https://www.domain.com/sonarr on any internet connected computer and have an SSL connection to it All can be found at my site here: www.seandion.com/unraid (note: got the info back up but restoring themes now)
March 20, 201511 yr Author @smdion - Wow, doing a reverse proxy was litteraly my next step after this. I'm going to be F5'ing your sight until it's 100% up. (Step 1 is still 404ing) @sureguy - So how does that work? is all of your traffic using an SSL or only select ports/IP's. After I get access to the dockers and reverse proxy ironed out, my next step will be to use the OpenVPN client on my tomato router that will pass all usenet traffic (SSL port 563) over the VPN and all other traffic over my normal network. Probably different than what you are doing, but if you are selectively using SSL I imagine you are using IPtables and I could learn a thing or two from you. Thanks
March 20, 201511 yr I reverse proxy everything using the Apache reverse proxy docker. (Not my Unraid GUI though!) Bought a domain from namecheap. Dynamic DNS so updated with captinsano's ddclient docker. I'm very new to Apache so took me a while to figure it all out and still having trouble reverse proxying wallabag and guacamole, but nzbget, sonarr and couch, as well as my eBook library all working great. All traffic routed to SSL port 443 and password protected. Worth the effort in my opinion and if you have an android phone, heartily recommend nzb360.
March 20, 201511 yr Author I reverse proxy everything using the Apache reverse proxy docker. (Not my Unraid GUI though!) Bought a domain from namecheap. Dynamic DNS so updated with captinsano's ddclient docker. I'm very new to Apache so took me a while to figure it all out and still having trouble reverse proxying wallabag and guacamole, but nzbget, sonarr and couch, as well as my eBook library all working great. All traffic routed to SSL port 443 and password protected. Worth the effort in my opinion and if you have an android phone, heartily recommend nzb360. Getting nzb360 working with sonarr is actually what prompted my original post. Probably a very beginer question, but what is the difference between the Apache reverse proxy docker and the ddclient docker? Does one manage the internal "host" connections and the other update your DNS. Can't dynamic DNS be set on a router pretty easily or am I confusing myself?
March 20, 201511 yr I reverse proxy everything using the Apache reverse proxy docker. (Not my Unraid GUI though!) Bought a domain from namecheap. Dynamic DNS so updated with captinsano's ddclient docker. I'm very new to Apache so took me a while to figure it all out and still having trouble reverse proxying wallabag and guacamole, but nzbget, sonarr and couch, as well as my eBook library all working great. All traffic routed to SSL port 443 and password protected. Worth the effort in my opinion and if you have an android phone, heartily recommend nzb360. I have guacamole docker installed and listening on port 81. Here is my proxy-config.conf: <Location /guac> ProxyPass http://192.168.0.3:81 ProxyPassReverse http://192.168.0.3:81 </Location> It is then available from http://yourdomain.com/guac/'>http://yourdomain.com/guac/ Note that http://yourdomain.com/guac just loads a blank page
March 20, 201511 yr I reverse proxy everything using the Apache reverse proxy docker. (Not my Unraid GUI though!) Bought a domain from namecheap. Dynamic DNS so updated with captinsano's ddclient docker. I'm very new to Apache so took me a while to figure it all out and still having trouble reverse proxying wallabag and guacamole, but nzbget, sonarr and couch, as well as my eBook library all working great. All traffic routed to SSL port 443 and password protected. Worth the effort in my opinion and if you have an android phone, heartily recommend nzb360. Getting nzb360 working with sonarr is actually what prompted my original post. Probably a very beginer question, but what is the difference between the Apache reverse proxy docker and the ddclient docker? Does one manage the internal "host" connections and the other update your DNS. Can't dynamic DNS be set on a router pretty easily or am I confusing myself? Yeah Ddclient just keeps your IP address updated if you have a dynamic IP allocated from your ISP. I do believe it is a function on some routers and may indeed be on mine, just haven't checked. The reverse proxy docker is essentially Apache and allows you to access your webgui apps over the internet but without opening lots of different ports and in my mind is more secure, as Apache is likely to have less security flaws than your average app like NZBGet. I may be wrong but seems logical to me.
March 20, 201511 yr I reverse proxy everything using the Apache reverse proxy docker. (Not my Unraid GUI though!) Bought a domain from namecheap. Dynamic DNS so updated with captinsano's ddclient docker. I'm very new to Apache so took me a while to figure it all out and still having trouble reverse proxying wallabag and guacamole, but nzbget, sonarr and couch, as well as my eBook library all working great. All traffic routed to SSL port 443 and password protected. Worth the effort in my opinion and if you have an android phone, heartily recommend nzb360. I have guacamole docker installed and listening on port 81. Here is my proxy-config.conf: <Location /guac> ProxyPass http://192.168.0.3:81 ProxyPassReverse http://192.168.0.3:81 </Location> It is then available from http://yourdomain.com/guac/'>http://yourdomain.com/guac/ Note that http://yourdomain.com/guac just loads a blank page Yeah, that's as far as I got with it and could never get to the bottom of why he trailing / is so essential. Also seen some examples replacing http with ajp and couldn't understand that either. I was thinking of starting a reverse proxy thread where people could post the configs they use for each app as a useful resource. But a bit busy at the moment with work so never quite got around to it...
March 20, 201511 yr Also haven't managed to reverse proxy owncloud yet either. I had a config for this working before I got rid of my main box. Had to play around with this stuff: https://doc.owncloud.org/server/5.0/admin_manual/configuration/configuration_reverseproxy.html I should have updated my documentation first... (let me know if you have any fully working redirects and I'll add it)
March 23, 201511 yr hi, just wondering .. why dyndns/reverse proxying when you could openvpn ? I use OpenVPN to connect to my router/unRAID interface. I like the ease of not connecting to a VPN and being to access other stuff anywhere.
March 23, 201511 yr Yeah, that's as far as I got with it and could never get to the bottom of why he trailing / is so essential. Also seen some examples replacing http with ajp and couldn't understand that either. I was thinking of starting a reverse proxy thread where people could post the configs they use for each app as a useful resource. But a bit busy at the moment with work so never quite got around to it... It seems that accessing guac from a proxy is much much slower (in fact I can't actually connect to a machine before it times out) so I have gone back to accessing it directly via port, which works fine. Do you have the same issue?
March 23, 201511 yr Yeah, that's as far as I got with it and could never get to the bottom of why he trailing / is so essential. Also seen some examples replacing http with ajp and couldn't understand that either. I was thinking of starting a reverse proxy thread where people could post the configs they use for each app as a useful resource. But a bit busy at the moment with work so never quite got around to it... It seems that accessing guac from a proxy is much much slower (in fact I can't actually connect to a machine before it times out) so I have gone back to accessing it directly via port, which works fine. Do you have the same issue? No, it works ok for me but I've only tried it on my LAN so far.
March 23, 201511 yr No, it works ok for me but I've only tried it on my LAN so far. Fine on LAN, dog slow outside
Archived
This topic is now archived and is closed to further replies.