[Support] Djoss - Nginx Proxy Manager

[mattie112]

Just keep in mind that if your certificate needs to be renewed it will most likely fail due to the same issue!

[itlists]

3 hours ago, mattie112 said:

Just keep in mind that if your certificate needs to be renewed it will most likely fail due to the same issue!

Any workaround for this?

Edited November 2, 2020 by itlists

[mattie112]

16 minutes ago, itlists said:

Any workaround for this?

Fixing the issue you are having  I would suggest checking cloudflare if you can exclude a directory from being cached so that the letsencrypt verification works.

[itlists]

3 minutes ago, mattie112 said:

Fixing the issue you are having  I would suggest checking cloudflare if you can exclude a directory from being cached so that the letsencrypt verification works.

Disabling the CF proxy defeats the purpose of the service

Is there a way to force a renewal? If possible to force a renewal, then I could disable the cloudflare proxy temporarily and push the LE renewal.

Edited November 2, 2020 by itlists

[mattie112]

Yes you can but then you have to do that every ~3 months and that does not seem like a solution to me.

 

docker exec -it NginxProxyManager sh

and then

certbot renew

 

But a quick google shows that in CloudFlare you should be able to exclude an url (yoursite.com/.well-known/*) from being cached and then it should work perfectly.

[romain]

I'm using the code-server docker and accessing it through code.mydomain.com.  The code-server application has an extension called "live server" that lets you view your html/css/js in a browser that updates live.  By default you can access it from port 5500, if 5500 is not available then it uses 5501 and so on - right now 5502 seems to be the most available so that's what I'm setting up right now but I'll probably set up 5500 through 5509 or something once I get the first one working.  I access the UI for the code-server container through port 8443.  I'm using the "custom : br0" network type because if I used the default Bridge network type I couldn't access the "live server" page but using the bridged IP it does work if I pass the ports through in the container settings.

 

code.mydomain.com works fine and takes me to 192.168.10.38:8443 with no issues, I got the "live server" to be accessible at live02.mydomain.com taking me to 192.168.10.38:5502, but ideally I'd like to be able to access it by going to code.mydomain.com/live02 INSTEAD OF live02.mydomain.com.

 

I tried using the "custom locations" option in my code.mydomain.com proxy host setup but (I also tried /live02/ as the location instead of /live02 - the error page was styled differently which was interesting but it was still the same error).

 

 

 

 

I've tried to set the custom locations up a time or two in the past but haven't been able to get them working so I'm hoping that I'll finally be able to get my head around how they work here.  Thanks for any ideas or advice.

[Djoss]

16 hours ago, romain said:

I'm using the code-server docker and accessing it through code.mydomain.com.  The code-server application has an extension called "live server" that lets you view your html/css/js in a browser that updates live.  By default you can access it from port 5500, if 5500 is not available then it uses 5501 and so on - right now 5502 seems to be the most available so that's what I'm setting up right now but I'll probably set up 5500 through 5509 or something once I get the first one working.  I access the UI for the code-server container through port 8443.  I'm using the "custom : br0" network type because if I used the default Bridge network type I couldn't access the "live server" page but using the bridged IP it does work if I pass the ports through in the container settings.

 

code.mydomain.com works fine and takes me to 192.168.10.38:8443 with no issues, I got the "live server" to be accessible at live02.mydomain.com taking me to 192.168.10.38:5502, but ideally I'd like to be able to access it by going to code.mydomain.com/live02 INSTEAD OF live02.mydomain.com.

 

I tried using the "custom locations" option in my code.mydomain.com proxy host setup but (I also tried /live02/ as the location instead of /live02 - the error page was styled differently which was interesting but it was still the same error).

 

 

 

 

I've tried to set the custom locations up a time or two in the past but haven't been able to get them working so I'm hoping that I'll finally be able to get my head around how they work here.  Thanks for any ideas or advice.

When you setup a "/live02" custom location, did you try to access it via "code.mydomain.com/live02" or "code.mydomain.com/live02/" (with or without ending slash) ?

[romain]

8 hours ago, Djoss said:

When you setup a "/live02" custom location, did you try to access it via "code.mydomain.com/live02" or "code.mydomain.com/live02/" (with or without ending slash) ?

I tried both, neither worked.

 

 

When I tried using /live02/ in the settings (as opposed to what was shown in the screen shot) something confusing also happened when trying to go to code.mydomain.com/live02.  Instead of it immediately not working, it sat there and tried to load for 10 - 20 seconds and then the URL changed to be code.mydomain.com:4443/live02/ which is very strange, nothing in my code-server or my Nginx Proxy Manager settings have anything to do with port 4443, so I'm not sure where that's coming from.

[Gee1]

hey.. i need to directly access some game server files for http download via "ut3.mydomain.de/ut3" non-ssl

 

how is that possible?

[Gee1]

I get Rocket Chat not to work also

[InfInIty]

Anyone had any luck getting guacamole to work through the manager.

 

I am getting 502 error when i go to the url?

[Gee1]

still waiting for Rocket Chat. With nginx it works

[mattie112]

On 11/7/2020 at 2:35 AM, InfInIty said:

Anyone had any luck getting guacamole to work through the manager.

 

I am getting 502 error when i go to the url?

 

8 hours ago, Gee1 said:

still waiting for Rocket Chat. With nginx it works

Perhaps show your config? And in case of Gee1 the exact error. Without info there is no way someone can help you...

[lsymfr]

So I'm having trouble setting up an access list in NPM. I set it up as its supposed to go but when I go to the URL it does not ask for authentication. I have looked in the console and this error code is showing up..

 

Duplicate relation "access_list" in a relation expression. You should use "a.[b, c]" instead of "[a.b, a.c]". This will cause an error in objection 2.0

 

anyone knows how to fix this error?

 

[mattie112]

24 minutes ago, lsymfr said:

So I'm having trouble setting up an access list in NPM. I set it up as its supposed to go but when I go to the URL it does not ask for authentication. I have looked in the console and this error code is showing up..

 

Duplicate relation "access_list" in a relation expression. You should use "a.[b, c]" instead of "[a.b, a.c]". This will cause an error in objection 2.0

 

anyone knows how to fix this error?

 

Can you show your config? This is not an error, only a warning (that it will give an error in the next version)

[debit lagos]

2 hours ago, lsymfr said:

So I'm having trouble setting up an access list in NPM. I set it up as its supposed to go but when I go to the URL it does not ask for authentication. I have looked in the console and this error code is showing up..

 

Duplicate relation "access_list" in a relation expression. You should use "a.[b, c]" instead of "[a.b, a.c]". This will cause an error in objection 2.0

 

anyone knows how to fix this error?

 

What I remember seeing is that once you set up, you need to go back to that proxy host and edit, select the access list you want to use and save/ok.

 

If for some reason you have to modify that access list, you need to go back to each proxy host that uses that access list and just edit the host and save/ok. If I can find the video that I found that solved this for me, I'll post it.

 

Hope that helps.

[lsymfr]

3 hours ago, mattie112 said:

Can you show your config? This is not an error, only a warning (that it will give an error in the next version)

 

I have followed many tutorials and have reinstalled the docker multiple times. Even played around with my router's forwarding settings and nothing

[lsymfr]

1 hour ago, debit lagos said:

What I remember seeing is that once you set up, you need to go back to that proxy host and edit, select the access list you want to use and save/ok.

 

If for some reason you have to modify that access list, you need to go back to each proxy host that uses that access list and just edit the host and save/ok. If I can find the video that I found that solved this for me, I'll post it.

 

Hope that helps.

I already did this when I originally set it up and it did not work

[mattie112]

1 hour ago, lsymfr said:

 

I have followed many tutorials and have reinstalled the docker multiple times. Even played around with my router's forwarding settings and nothing

Did you remove the 'domain names' for the purpose of the screenshot? I don't think it works without a domain name.

[InfInIty]

12 hours ago, mattie112 said:

 

Perhaps show your config? And in case of Gee1 the exact error. Without info there is no way someone can help you...

Here are screen shots of my config

 

 

 

Here is the error when trying to access the page.

 

[lsymfr]

7 hours ago, mattie112 said:

Did you remove the 'domain names' for the purpose of the screenshot? I don't think it works without a domain name.

Yes only for the screenshot. I just used an erase tool didn't actually remove it. I can access it from outside the local network

[Djoss]

2 hours ago, InfInIty said:

Here are screen shots of my config

 

 

 

Here is the error when trying to access the page.

 

The 502 error usually indicate that NPM cannot reach your app.  Can you manually access https://192.168.1.22:9999 ?

[Djoss]

2 hours ago, lsymfr said:

Yes only for the screenshot. I just used an erase tool didn't actually remove it. I can access it from outside the local network

And how did you configure the access list ?  Do you have usernames/passwords and/or IP addresses ?  Do tou have "Satisfy Any" enabled ?

[lsymfr]

2 hours ago, Djoss said:

And how did you configure the access list ?  Do you have usernames/passwords and/or IP addresses ?  Do tou have "Satisfy Any" enabled ?

I have usernames and password set up, no IPs and yes I enabled satisfy any

[[email protected]]

Hi all, I have two issues.

 

1. Unable to get the Letsencrypt SSL cert. it says "Internal Error" always

 

2. I got a certificate and private key from my cloudflare tool and saved them as .pem files and now while uploading them i am getting this error. (also attaching a screenshot)

 

Upload failed: Certificate Key is not valid (Command failed: openssl ec -in /tmp/8dce0efe-c119-448b-809e-c7b1408fb42e/tmp -check -noout 2>&1 ) 

 

Kindly help. thanks.