NGINX Proxy Manager: How to Install and Setup Reverse Proxy on Unraid

Рет қаралды 150,955

Күн бұрын

NGINX Proxy Manager enables you to easily forward to your websites running at home or otherwise, including free SSL, without knowing too much about NGINX or Letsencrypt. An excellent reverse proxy to help connect your services to the web.
Today, we'll install it on Unraid using Docker containers and explain how it works. We'll teach you how to set up and use a reverse proxy to get your internal applications out to the internet.
I have since realized the name is pronounced as 'Engine X'; however, I'm an Aussie, so we say it differently. That's not really true, but hey, who cares?
🔔 Subscribe for more tech tips and tutorials: @IBRACORP
👍 Like this video if you find it helpful, and tell us in the comments what other tutorials you'd like to see.
🚀 Timestamps:
0:00 Intro
0:36 What is NGINX Proxy Manager
3:55 Installing NPM
7:20 Configure NPM
9:05 How NPM Works
12:33 Port Forwarding
13:55 DNS
15:33 Install App to Proxy
16:10 Add New App to NPM
20:00 Other Features of NPM
📌 Follow us on social media for the latest updates:
Website: ibracorp.io/
Discord: / discord
Reddit: / ibracorp
Twitter: / ibracorp_io
Facebook: / ibracorp
💖 Support Us:
Your support helps us to keep producing high-quality tech tutorials and content. If you've found value in our videos, consider supporting us in the following ways:
PayPal: www.paypal.com/donate/?hosted...
Shop: shop.ibracorp.io/
Subscribe and share our videos with friends and colleagues.
Every bit of support makes a huge difference and enables us to continue delivering content that helps you make the most out of the latest technology!
For business enquiries, please email support@ibracorp.io
#Nginxproxymanager #nginxconfiguration #NPM #nginxforbeginners #nginxproxy #nginxproxymanagertutorial #nginxproxymanagerunraid #nginxreverseproxy #nginxreverseproxyconfiguration #nginxtutorial #nginxssl #nginxtutorial #reverseproxynginx #reverseproxytutorial #nginxproxymanagerdocker nginx reverse proxy nginx tutorial reddit

Пікірлер: 333

@IBRACORP 3 жыл бұрын

Thanks for watching! We appreciate ya. Do you like NPM as a reverse proxy? What do you use currently? Let us know below!

@benjaminmcgee9873 3 жыл бұрын

Just got it, Your videos of higher level stuff are great, these kinds of things never get videos. I guess because the documentation is so good now days, but as much as I love this stuff I don't have the time to tinker and learn what I don't know, so the info is very useful. The critique was one I received in the past for flight instruction, when you love something you love to share the knowledge, but sometimes we can turn into a firehouse of info :D From my comments you can see it is a hard habit to break, hah

@IBRACORP 3 жыл бұрын

That's okay Ben I appreciate taking the time to leave the feedback. I will take it on board! Thanks for watching

@nonamemcgee4842 2 жыл бұрын

It's good to have another Unraid youtuber out there. I love Spaceinvader's content but having more and varied perspectives is a good thing.

@IBRACORP 2 жыл бұрын

Thank you! Glad to have you 🙂

@OnlyDadsOG 2 жыл бұрын

I've spent probably 10-15 hours trying to get swag and cloudflare working. The reasons you described fit me to a T. I was successful with your guide and I really appreciate it. +1 sub!

@darrendieckman1289 Жыл бұрын

Amazing guide. NPM is amazing. It takes all the guesswork out of setting up a reverse proxy with a nice web-gui.

@anthonybrownbill5677 2 жыл бұрын

Thanks so much for posting this. Helped me to no end with getting my nextcloud up and running.

@pietervheerden 2 жыл бұрын

Fantastic videos on this channel! Just changed from SWAG to NPM. Was way easier than the SWAG config and I was up and running in no time flat.

@IBRACORP 2 жыл бұрын

That's the best part of NPM! Thanks for coming and checking out the channel

@alessandrocasserini9536 Жыл бұрын

I may have lost a few details such as: 1) Network Type: Custom @ 5:20 --> How do you set it up? Is it needed? What's the difference to not using it (in terms of settings/upsides/downsides)? 2) What if I don't have a domain and therefore I can't set cloudflare @14:00 ? I just have a DynDNS pointing to my public IP that I will not really give out

@SiRMarlonProductions 3 жыл бұрын

Thanks for this video! Got my NPM all setup and configured. Just moved from SWAG and this is way easier!

@IBRACORP 3 жыл бұрын

Heaps easier! Thanks for watching

@Ricofizz 2 жыл бұрын

Thanks for the video & documentation, finally got it working after moving from SWAG. For anyone having trouble with getting the certificates issued. It could be that in Cloudlfare the proxy is on while the cert hasn't been issued yet. Turning the proxy off allowed me to request a cert after which I could enable cloudflare's proxy once again.

@AwesomeOpenSource 3 жыл бұрын

Thanks for the shout out. This was an excellent how to. Very very good!

@IBRACORP 3 жыл бұрын

My pleasure mate, you deserve it. And thank you for the feedback, feel it's getting better

@beemerrox 2 жыл бұрын

Followed this video and DAMN it made my day, everything works perfectly. Love NGINX. Thanks a lot!

@IBRACORP 2 жыл бұрын

You're welcome thank you for watching!

@justangvano Жыл бұрын

I don't understand how this is so easy. It seems too good to be true. Thanks for the video.

@smsunday1 3 жыл бұрын

This was very helpful! I'm looking forward to more guides.

@IBRACORP 3 жыл бұрын

Thanks Scott, appreciate coming back and checking it out. Look forward to putting more out

@aaronbeckwith2936 3 жыл бұрын

Thank you so much for this! Everything is presented so well!

@IBRACORP 3 жыл бұрын

Thank you for the feedback glad you enjoyed it :)

@whyzen2081 Жыл бұрын

For those getting "internal error" and other issues, I found switching the container from custom to bridge actually fixed my problems, after temporarily disabling the proxy slider on cloudflare. Got SSL from Let's Encrypt working now.

@dannypopo Ай бұрын

Thanks for the help, even 3 years later still working guide :)

@p0larz0mbies Жыл бұрын

Thank you so much for the video, was way easier than setting up swag.

@StuartColman1971 3 жыл бұрын

Thank you sir, a really great video. Made the switch from SWAG so easy. Looking forward to more

@IBRACORP 3 жыл бұрын

You're very welcome Stuart, thanks for watching, appreciate your patronage

@jerrycarterpc1 3 жыл бұрын

Did you remove swag completely, or just stop the app? I have have more trouble than I care to admit. Which seems silly since it looks so simple

@hawolex2341 2 жыл бұрын

Me to. my nextclud was down for like 2 min when i make the switch. so mutch more fun now

@rambro1stbud 7 күн бұрын

Thanks, man! I am running nginx on Truenas, so I had to change values to fit my set up. But I got it working in the end. Took two days and having this video up on a second monitor. Only issue I’m having now is the site will only load in Chrome, not Safari.

@sarthakvarshney 2 жыл бұрын

This is a life saver. Also, I'd like to highlight, in case with some people, at the end of the process, the domain opens not private page or the router's page, they should check their new domain on some other network to see if it's working or not. They can also connect to a VPN and then check on their network too.

@Elmojomo 2 жыл бұрын

I'm having this issue. When I browse to my domain from outside my network, I get stopped at my router page with an error. How did you fix it?

@SamMC08 Ай бұрын

Thanks a bunch. Thought it wasn't working until I read this and tried using mobile data.

@sliljekvist 3 жыл бұрын

Really clean and well made guide. thanks alot!

@IBRACORP 3 жыл бұрын

Thanks Sammi! Really appreciate it

@marek2388 11 ай бұрын

Still great videos. Really appreciate the help with unraid.

@IBRACORP 11 ай бұрын

Thank you ♥️

@carbncow Жыл бұрын

I LOVE YOU. This is exactly what I needed.

@IBRACORP Жыл бұрын

I love you too xx

@Alfred2695 3 жыл бұрын

Thanks for the video, really clear explanations :)

@IBRACORP 3 жыл бұрын

My pleasure thank you for watching and subscribing :)

@Techie4life 3 жыл бұрын

Thank you for letting me move from Swaq to NGINX Proxy Manager.

@darekf77 2 жыл бұрын

fantastic video!

@realabzhussain 3 жыл бұрын

Brilliant - no fluff, just do it. got a subscriber.

@IBRACORP 3 жыл бұрын

That's how we do it here Abz. Thanks for subscribing!

@hawolex2341 2 жыл бұрын

YOU make this shit fun for me. ty. keep up these no crap bullshis tutorials. i love them.

@IBRACORP 2 жыл бұрын

You're a legend mate thank you for the feedback I really appreciate it ✌️

@nigelholland24 3 жыл бұрын

Great video and nice for some updated videos, while space invaders video are very good some are now getting outdated especially if your new to unraid like me thanks again

@IBRACORP 3 жыл бұрын

Hi Nigel, you are correct and technology changes often so staying on the forefront is critical to do justice to our users as well as unRAID who constantly improve their platform. Thanks for tuning in and hope to share more soon

@JGNiDK Жыл бұрын

Pumba is always a good name!! And a cute warthog

@lionkingnaveen Жыл бұрын

I checked - everything is clean

@derBerg 3 жыл бұрын

Gutes Ding, weiter so!

@IBRACORP 3 жыл бұрын

Danke

@JaySwarve 5 ай бұрын

Brilliant!

@Gragorg Жыл бұрын

Great tutorial.

@gwallace70 3 жыл бұрын

thanks! really useful!

@IBRACORP 3 жыл бұрын

You're welcome! Thanks for watching

@aliengoa0 9 ай бұрын

great video. thank you

@blinkitogaming 3 жыл бұрын

Hi Ibra! I really like your videos, they're great and helped me so much with my unraid server. One question here: I've been using letsencrypt, then swap and since I watched this video I've been trying NPM with no issues on hosting my docker services but, I've also configured some websites on swap pointing each one to a specific folder, tried to do it with NPM with no luck. What could I be missing? Thanks in advance mate!

@constantlyit 2 ай бұрын

Love the server name!! 😂

@manofoz 10 ай бұрын

Why was a CNAME DNS entry added for "proxy"? I didn't see that get used anywhere after adding it.

@sinhalo 3 жыл бұрын

Thanks do Nextcloud next :)

@Zmann966 6 ай бұрын

Flawless. Amazing. Got it working across a few subdomains/containers really great... But for some reason I cant get an SSL for Jellyfin ("Internal Error" in NGINX when I try and create the proxy host) and can't get it to work without it either... Hmmm... Gonna have to keep digging.

@Viviolau Жыл бұрын

Thanks for the video. But why did we use "request a new ssl certificate" vs choosing the custom one we added to nginx? I wanna be able to understand.

@kazak865 Жыл бұрын

I have a quick question, when i added overseer to this, it works on an external whise and internal, however ive noticed that the loading time for the login is very slow. I was wondering if this is because in docker i have my plex media server on the bridge network? I tried adding the plex media server to my custom docker network, which improved the login speed for overseer, however connecting to the media server externally isn't able to be done directly for playing and uses the dreaded plex relay service, is there a step im missing on port forwarding or something that i need to do?

@firinggamers3217 2 жыл бұрын

hey so its not entirely this subject but i have tried running pterocdactyl with nginx proxy manager by putting nginx cli on another port and redirecting via nginx proxy manager but im having a bit of issues getting error of too many redirects and cannot login like i opened a new icognito mode tab and tried to login with multiple emails doesnt work

@austinmabry8462 2 жыл бұрын

In my router, am I supposed to forward those ports to the proxy server? Is it actually serving as a relay server, or is it just translating the dns request and then passing the port number to request along? The tutorial is kinda fuzzy on how the routing of the traffic of the services themselves is actually handled.

@arminbreuer7968 2 жыл бұрын

Great video, I understand everything but one thing - why will the Let'sEncrypt fail with internal server error when I set the cname/a record in Cloudflare to "proxied"? It works fine when set to DNS only. Don't I loose a lot of security when Cloudflare is set to DNS only?

@ppureevill1548 3 жыл бұрын

I LOVE YOU !!!

@Threep666 10 ай бұрын

Love the video, I have almost the same setup as you here but am having problems when I try and do the certificate. I get an api communication error, do I need to do something in Cloudflare for the certificate request to work properly? I think the port forwarding and stuff is OK because if I don't use ssl I can access the site properly, but that's not ideal obviously. Do I need to set the domain in Cloudflare from "Flexible" ssl settings to "Full" or something else in Cloudflare? I think the problem I am having is to do with the certificate not being issued properly.

@GuilhermeMarquesMachado 3 жыл бұрын

I'm using my br0 network, is there any way to connect the br0 network to host? This is a problem when I'm using HASSIO supervisor that runs on host

@eternaltreason 2 жыл бұрын

So ive done all of these steps, and I have used overseerr as well. When i load overseerr it says you are offline. and there is abutton to press that says reload. No matter what I do it just comes back to that screen.

@leebuckley4873 9 ай бұрын

This is well explained but I have a question what happens if your ISP have blocked most of your ports as mine has would this still work ?

@blairsaltel7119 Жыл бұрын

A great video and it helped guide me off of troubleshooting SWAG. One question relates to managing nextcloud. The reverse proxy works with nextcloud (ie: I can access it through my subdomain), but the nextcloud container gives me a bunch of security errors (The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds, or Your web server is not properly set up to resolve "/.well-known/webfinger".) All of the help documentation assumes .conf files can be manipulated (like in SWAG). How can I do something like this in NPM?

@thomasmoore1608 Жыл бұрын

How do you have your content empty at 14:12 when setting the www and @ for cloudflare? I'm prompted to use the server IP and unable to proxy it cause it isn't externally facing

@someguy9321 Жыл бұрын

im forwarding the ports as you shown (except for 18443, i had to put it as 1443 bc my router couldn’t do that with 443, saying not allowed) and my domain still links to the unraid web gui. I also did the A record of @ leading to my home IP and another A record of www leads to the server IP

@ThePirateGod 2 жыл бұрын

Seriously great video I have done everything and am losing my mind. Each time I try to create a proxy host it fails saying "Internal Error". I have tried so many things and now have a Cloudflare account with a domain that I am not using because I can't figure out these issues. Would it be possible to do a follow up video maybe with some trouble shooting along the way?

@Duckers_McQuack 8 ай бұрын

Hoi, is there something else one have to do to reverse proxy for example a webcam stream on another computer, in this case, klipper webcam on a raspberry pi to successfully pass through nginx on unraid?

@eierund 2 жыл бұрын

I’d be really interested to know more about the custom bridge mode you set up for the network. It seems you prefer the custom one over just “bridge” so it would be great to know why and how to set that up! :)

@IBRACORP 2 жыл бұрын

It's your lucky day! We actually covered this here: kzfaq.info/get/bejne/bcyqdad0rp6zYqs.html Be sure to check the pinned comment too

@tomsheinman1383 Жыл бұрын

hey great video! but i have a problem, this guide work perfectly for NEXTCLOUD but when I try to do it to - radarr/obmi etc. it doest work with SSL and only HTTP, doest it's mean my server will be more vulnerable?

@ohfpv8288 9 ай бұрын

Thanks for the video it helped a lot! The only issue Im having is with enabling "Force SSL" option. If that is enabled I am not able to access the website. If it is disabled I have no issues. I am using CloudFlare and have HSTS and always use HTTPS enabled. Any thoughts on how I can get Force SSL working?

@TheDomocorn 3 ай бұрын

I cannot get the DNS and Cloudflare part to work. I have my DNS switched to use CLoudflare now and I get a 552 error when trying to navigate to the cname record I have configured. Now I am sure I am just missing something important. I have an A record that points to my external IP then a CNAME record pointing to that A record. The rest of the config is the same as the video. Do I need to have the docker containers I want to forward to also on a private network within UnRaid? Any guidance is appreciated.

@TacPanini8578 Жыл бұрын

this was all working great for me until, for some reason, certbot failed to renew the certs "Failed to renew certificate npm-1 with error: Some challenges have failed." Manually clicking the Renew Cert button in NPM also fails. Is it a port forwarding issue? Ive read that you need to have port 80 staying at port 80 elsewhere on the web. I think for this I had port 80 forwarded to 1880 for NPM in my pfsense.

@AlienShine 3 жыл бұрын

Does not get a certificate. Internal server error.

@TheYellowAznBoiZ 2 жыл бұрын

Hey I know this is an old vid but could you do a DDWRT video? Like what the best setting a home lab environment and such, greatly appreciate your contents!

@francescogiuseppemorabito4276 Жыл бұрын

hello, I have followed your guide and I really want to thank you for all the efforts you put into this. however, after a couple of months that I had NGINX working, I am now facing a disaster... I am locked out... I can access all the services I added in NGINX but I can't access unraid itself (not even when I am at home and I try to connect locally)... do you have any clue, before I erase everything and I restart from scratch?... should have I made a subdomain for unraid too? should have I changed the default ports of unraid? please help!!!

@decuset9702 Жыл бұрын

Did the video "skip" or did I miss something? At around the 14 minute mark you add a cname of "proxy" but then do nothing else with it. Are we to add that somewhere in nginx?

@GravyBoat 6 ай бұрын

Did you figure this out?

@jwhite175 6 ай бұрын

@@GravyBoatyes but I'm not sure what I did at this point. I think I used the cloud flare tunnel docker.

@GravyBoat 6 ай бұрын

@@jwhite175 ya I got it too found it from a different video. Had to set A name as domain without the prefix.

@SxC97 2 жыл бұрын

IF YOU ARE GETTING "INTERNAL ERROR"... try disabling "proxied" for your CNAME record in cloudflare, then try again. It should work. At this point, reenable the proxied toggle and everything should work fine.

@deeppatel8083 2 жыл бұрын

Thank you for this sir! You saved my day :) (Thanks IBRACORP for the video as well!)

@mad7505 11 ай бұрын

You skipped the part of adding the Cname im stuck on adding it because it requires I add an answer to the Cname which I dont know what to place

@jamesbowie1820 Жыл бұрын

What if you dont have a domain and just want to access your dockers remotely?

@waleedjanjua1829 6 ай бұрын

Thanks!

@IBRACORP 6 ай бұрын

Thank you 🙏

@mikulamali8833 Жыл бұрын

@IBRACORP I have been struggling to get any reverse proxy to work. You being a UDM Pro user could the UDM be blocking something in this process? I tried with the tunnel as well and no luck.

@mattwantsatesla3812 11 ай бұрын

The proxy manager shows the proxy as online, but when clicking the link, I get "hmm we're having trouble accessing that site."

@newjacksm Жыл бұрын

How can I point/reverse proxy to apps/dockers only to LAN. I don't care about cloudflare/ssl. I want to keep everything in house.

@GRAVIZNL 3 жыл бұрын

I'd love to see a video about the move from spaceinvader one's let's encrypt (swag)/nginx reverse proxy setup to your setup and show us the benefits.. I think most of us have this setup.

@IBRACORP 3 жыл бұрын

Good point mate I think that's a good approach

@Ilcarovecchiogamerbix Жыл бұрын

It works, but if I want to have another 443 on another internal address? it doesn't work anymore! how do I solve this problem?

@philipburke2885 2 жыл бұрын

Hey mate, good to hear an aussie accent on these tutorials. Hoping you can help if you have time. I have set up successfully with sonnarr and radarr. Seems to have no problem with other unraid dockers, but going to docker or web server on another VM is an issue. Currently having issues with a self hosted HUDU install. Works fine by direct IP or port forwarded to direct IP. Soon as I port forward to NPM I get redirect issues. Hudu has SSL (letsencrupt) built in so I have tried turning it off in NPM and various other configs that don't seem to work.

@philipburke2885 2 жыл бұрын

More info: Using Bridge network. If I select SSL-none I get http2 protocol error, and if I select SSL and ony check HTTP2 support I get too many redirects. Have also played with site config files and 'custom locations'. I spent weeks (maybe more) trying to build a reverse proxy server a couple of years ago and gave up. Really would like to get this working so I can host more than one thing. Any help is greatly appreciated. Even pointing me towards another vid or some conscise docs.

@notoryous2 2 жыл бұрын

Did you ever find a solution to this?

@philipburke2885 2 жыл бұрын

@@notoryous2 Yes mate. Turns out I had completely missed a couple of settings. Scheme - HTTPS instead of HTTP and make sure the port is also correct... not always 80 or 443.

@jhmc93 2 жыл бұрын

Do you own a raspberry pi? im trying to do what you have but using docker through portainer to expose ombi to public using my own domain. I keep running into problems though. can you provide a solution? thanks

@905jay 3 жыл бұрын

After installing NPM I had to wait about 10 minutes before I could login with the default credentials. Not sure why but it kept giving me a bad user error (user not found, or something to that effect). I couldn't find that documented anywhere, but after about 10 minutes I could get in. Also, I switched from swag container, and got errors when adding the proxy hosts. I switched to CF origin server cert and it took care of the issue. I think LE in NPM was conflicting somehow with certs I already had registered in swag

@IBRACORP 3 жыл бұрын

Yeah could be due to using similar details in the LE certificates which might return a failure as the certificates already exist elsewhere. Using CloudFlare is the best way in my opinion anyway, great job getting it going

@MrBaracas 3 жыл бұрын

I've been thinking about setting up something like this or haproxy on pfsense for a while now, not cause i really want to, but I think I'm going to have to. For years I've just had separate physical network coming off pfsense, nic switch etc. And 1 fqdn with everything pointing directly here, a records, mx, etc, well not my own ns servers, but away. Its worked great. I figured isp would get mad about the whole mx thing and either block or send me a nastly letter or something, but after a couple of years they never have. But i'm really light on 25 so idk, but back to my point: Now I have a 2nd fqdn pointing here as well and there is where problems began and where I find my myself scratching my head as to how to proceed. Another subnet won't help anything with that i don't think. I'm a little out of touch i guess. Oh, and 1 or the domains i have uses cloudflare ns. Your cloudflare vid has kind of changed my mind about how i feel about them. I probably commented there.

@Thewickedjon Жыл бұрын

I install it, it says it installs fine... but it wont take the default credentials.... can't sign in... not sure what i'm doing wrong.

@BerkeleyTowers 3 жыл бұрын

Hey, absolutely love the videos! Right on point with what many of us are trying to do... Keep it up. Instant subscribe. Best Regards from a Pom. I hope you can help with a small problem.... I successfully have swag running and can access all my stuff remotely... but, trying to swap to NPM using your example with Overseer and keep running into an "Internal error" when I try and save a Proxy Host. Beating my brains out.... tried all sorts of permutations.... meanwhile Swag works serenely on!

@IBRACORP 3 жыл бұрын

Thank you Paul, I appreciate the great comment. Will definitely keep it up, more to come! As for your issue, if you haven't spent too much time on it have you tried deleting NPM and it's config and reinstalled?

@BerkeleyTowers 3 жыл бұрын

Yeh, tried that. I’ve tried installing NPM into my Home Assistant VM as well, but exactly the same issue.... “internal error” . I’m convinced it’s something on my side... swag and NPM dockers won’t interfere with each other on the same custom network will they?

@IBRACORP 3 жыл бұрын

Hmm well NPM will use ports 80 and 443 being forwarded from your router right?

@BerkeleyTowers 3 жыл бұрын

@@IBRACORP ..... after hours of doubting everything I ever thought I knew..... and virtually starting from scratch..... it turned out that my Cloudflare DDNS docker had somehow been deleted.... It's 'A' record was still with my DNS records, so it wasn't obvious until I went back to square one... Re-installed and all is well with the world! Well, still struggling to get the HA VM sorted, but hey ho.... small steps!

@IBRACORP 3 жыл бұрын

One step at a time my friend happy to hear you worked it out! Welcome aboard :)

@CampRusso 2 жыл бұрын

Amazing walk-thru! I've just started my Unraid journey with much help from illuminated nerd & spaceinvaderone. Now I'll be adding a 3rd source 😉😁🤘I'm slowly migrating from a Win10 box with emby/sonarr/radarr/unifi/etc and I've been using Caddy V2 as the reverse proxy for them. The GUI and ease of use won me over right away with NPM. However my OCD is wondering if this is the same as Swag, minus the gui? 🤔

@IBRACORP 2 жыл бұрын

Thank you for watching and subscribing! Look it depends on preferences, SWAG has some different features such as Docker mods and much flexibility in it's functions. NPM is simpler but does a great job at what it needs to do. Watch our SWAG video too and compare the pair !

@CampRusso 2 жыл бұрын

@@IBRACORP awesome thanks! Will def check out the your Swag vid. 🤔 NPM being simpler is a good thing. My caddyfile is the shortest ever. 😆

@abstraction21 Жыл бұрын

Thanks for the info. I have Google Fiber and I think it's just not accessible on port 80/443 externally so I wasn't able to get this setup.

@IBRACORP Жыл бұрын

Try our video on CloudFlare Tunnels to bypass 80/443 blocks and close open ports altogether

@xisop 3 жыл бұрын

Great video. Currently using swag, this looks so much easier. I'm going to migrate 😄

@IBRACORP 3 жыл бұрын

Haha I thought you might. Enjoy

@xisop 3 жыл бұрын

Haha. Yeah. And you can even run VM's through it 😁 2021 is the best year so far. Just installed a HassIO VM 😎 got some stuffs to do the weekend

@IBRACORP 3 жыл бұрын

Welcome to the club! Enjoy your weekend, I'll be putting up an Organizr video tonight too

@xisop 3 жыл бұрын

Fixed: jumped straight to custom certificates ;) Finaly fot some time to start working on this. When I add a proxy host following the video, clicking "save" gives an internal error on every CNAME I have. The line is added to the hosts, but when I clock the link, HOST gives an error, SSL certificate didn't pass validation. Is this a common thing or am I doing something wrong somewhere? Proxy Hosts overview also shows HTTP Only under SSL. When I run everything on Swag, all works fine. Allready transferred the DNS management to cloudflare.

@IBRACORP 3 жыл бұрын

Nice work! Enjoy

@Elmojomo 2 жыл бұрын

I was with you right up until the SSL cert part. I click [Save], it thinks a moment, then I get a generic "Internal Error" banner in red across the top of the dialog. Any idea how to proceed?

@isakolsen679 5 ай бұрын

did you figure out the problem, i got the same thing

@Elmojomo 5 ай бұрын

@@isakolsen679 nope. I just gave up. lol

@bastiju785 5 ай бұрын

i have the same problem :(

@IBRACORP 5 ай бұрын

If you're using Let's Encrypt then often this means LetsEncrypt is unable to verify your domain so it fails. We prefer using Cloudlfare origin certificates for this. Also, worth checking the logs when that error appears to help you figure out why. Otherwise, the method is definitely still working.

@dmo8622 5 ай бұрын

Accessing my subdomain works perfectly! However, when I attempt to access the domain itself - I get SSL handshake failed Error code 525 message. I'm guessing that's due to not having a web server running and hosting a site for the domain?

@alexdurigan3788 Жыл бұрын

Can I import my softs into soft soft and process without using a mic

@patricklayton9748 9 ай бұрын

it says I cant make it to the host for some reason. Brower working and cloudflare is working

@SuperZeroon Жыл бұрын

Fantastic video @IBRACORP can you make video about connecting NGINX with goaccess.

@mparrad Жыл бұрын

I like your video, but I wish it was that easy for me. My domain and DNS provider is namecheap, I am adding the subdomain there as an A Record, pointing to my public IP, I also have other A Records pointing to the same IP, but anyway... In NPM I am adding a new host, with my subdomain, when I follow your steps and click save I get the Internal Error message, at that point I cannot follow the suggestions other users have commented here because I am not using cloudfare. Also, I have tried with different network settings, host, bridge and custom with a static IP, nothing works... I have realized that sometimes I get the error "the domain already exist", so I go to hosts and I see the host there but it is not online, when I try to generate the ssl again and click save, the internal error comes back. Now, I successfully generated a SSL cert for my root domain, however, when I try to open Home Assistant from NPM (yes I am using my root domain with home assistant), it doesn't load the website, I have to manually add the home assistant port at the end (5123), however that works only in my PC, if I load the Home Assistant Companion from my tablet using my root domain, it doesnt work. Home Assistant works when I redirect port 443 in my router to port 5123 in my Home Assistant Pi. So at then I dont know what to do, I basically deleted the container for NPM, I went back and port forward my home assistant as it used to be, I cant use NPM for another application as I wanted (deemix) and I am in square one... I see everybody uses cloudfare and all videos or guides are made for that, but my case is different, I have had my domain for years with namecheap, I have used letsencrypt in VMs using the DNS method with namecheap without any issues, but I cant understand why is it so complicated with NPM. Any help is appreciated. Thanks.

@MrHuongalt 8 ай бұрын

Trying to get this working using a cloudflare tunnel... has anyone got this working--- I can point the tunnel to the http port on NPM but not a https port, nor can i get a certificate if I try to force https in NPM, trying to understand why, anyone have a clue I could borrow :)

@BrotherCMT 18 күн бұрын

Great video, very helpful! Quick question (noob here): At 15:55 what do you mean by create your admin account and set it up all the way before accessing remotely?

@TheEggman888 3 жыл бұрын

Fukken thanks, i was struggling to learn how to configure NGINX reverse proxy and Let's Encrypt, now i won't have to bother configuring HTTPS and certificate on everything i install.

@IBRACORP 3 жыл бұрын

Exactly right! Welcome aboard

@jotasalazar 3 жыл бұрын

Grate Tutorial!!! one question con you redirect www to non www using NGNIX Proxy manager?

@IBRACORP 3 жыл бұрын

You can have both the WWW and non WWW in the proxy host. But this is best set on the domain level/DNS. A 301 permanent redirect of WWW to non WWW is best

@russellmoran-allstateagent3697 2 жыл бұрын

I just switched from SWAG to Nginx Proxy Manager. Thank you for making this so clear. I am not familiar with how certificates work. I have successfully added nextcloud and got it to work (THANK YOU!!!) I'm trying to add other reverse proxies but I don't know if I can use the same nextcloud certificate from the dropdown list or do I need to create an individual certificate for each proxy? Thank you!!!

@IBRACORP 2 жыл бұрын

It's one certificate per domain. So if it's the same domain name then you can repick the same certificate 🙂 You're so welcome thanks for watching

@quadcom 2 жыл бұрын

The next challenge is how to go about setting this up using non-standard ports!! DNS TXT records is one way but I have not figured out how to do this with the UnRaid container

@IBRACORP 2 жыл бұрын

Use the CloudFlare tunnel and avoid ports all together (we did a video on it) Otherwise 80 443 can be forwarded to a different port as long as that is what you set in the container for NPM

@TristenLammi 11 ай бұрын

IMPORTANT NOTE FOR FELLOW AUSSIES: One potential issue is your ISP blocking ports 443 and 80. Im with Aussie BB and they do indeed block them, a simple call to support gets them unblocked (also get out of cgnat as well if you haven't already). Took me 3 days of hair pulling to figure that out.

@IBRACORP 11 ай бұрын

Cheers mate. You can also use CloudFlare tunnels for this purpose and to avoid opening ports altogether. Video on it on our channel

@MrSchuu 3 жыл бұрын

hello thank you for your video, just one question please, why do you not use dns challenge? are you able to explain what this does/is for?

@IBRACORP 3 жыл бұрын

Since we are using CloudFlare origin certificate we don't need to challenge against CloudFlare. When using a Let'sEncrypt certificate we do since it's a third party to CloudFlare

@MrSchuu 3 жыл бұрын

@@IBRACORP did you set it up this way in the video?

@DerpOtron9k 2 жыл бұрын

What would cause an Internal Error when saving the Host Proxy with SSL in NPM? I'm trying to get overseerr externally accessible. I've got the CNAME set and I've got 5055 port forwarded to the host IP. I also have 3 other apps that I have external access to. I'm losing my mind. lol

@IBRACORP 2 жыл бұрын

Using Let'sEncrypt or CloudFlare origin certificate? Check your NPM logs it will usually tell you

@nischinthachar1119 Жыл бұрын

michael i'd die for you

@sdmerkr 3 жыл бұрын

I didn't get a chance to watch the entire video, but previously NPM didn't allow for DNS validation on the SSL. I went to SWAG specifically for this issue... Is this still the case with NPM? And what about wildcard certs?

@IBRACORP 3 жыл бұрын

It does have DNS challenge inbuilt now if that's what you mean? I use a wildcard cert from CloudFlare so in that scenario it is available