Quick and Easy Local SSL Certificates for Your Homelab!
Рет қаралды 686,135
Күн бұрынTo try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/Wolfgang/
The first 200 of you will get 20% off Brilliant’s annual premium subscription
Follow me:
Mastodon tilde.zone/@notthebee
GitHub github.com/notthebee
Twitch twitch.com/notthebeee
Support the channel:
Patreon / wolfgangschannel
KZfaq Members / @wolfgangschannel
PayPal (one time donation) www.paypal.com/donate/?hosted...
Music:
Meod - Crispy Cone
Skygaze - Hug Me
Steven Beddall - Cuts So Deep (Instrumental Version)
Liquify - Afternoon
Kola - Mello Me
Videos are edited with Davinci Resolve Studio. I use Affinity Photo for thumbnails and Ableton Live for audio editing.
Video gear:
Camera geni.us/K8OOyKV (Amazon)
Main lens geni.us/jnnElY4 (Amazon)
Microphone geni.us/tgiSqL (Amazon)
Key light geni.us/Gi1zE2 (Amazon)
Softbox geni.us/F86pM (Amazon)
Secondary light geni.us/aciv (Amazon)
Other stuff that I use:
Monitor geni.us/KUzcmcP (Amazon)
Monitor arm geni.us/5RXu (Amazon)
Laptop stand geni.us/X5vx9Af (Amazon)
Keyboard www.amazon.de/HHKB-PD-KB401W-...
Mouse geni.us/KB7h (Amazon)
Audio interface geni.us/sdhWsC (Amazon)
As an Amazon Associate, I earn from qualifying purchases
This video was sponsored by Brilliant
Timestamps:
00:00 Intro
00:57 How does it work?
01:34 Brilliant.org
02:28 What will we need?
04:40 Installing Docker - Tutorial starts here
06:03 docker-compose Walkthrough
06:46 Generating the certificate
08:32 Setting up domains
11:02 Outro
@WolfgangsChannel Жыл бұрын
Text version of the video with all the commands: notthebe.ee/blog/easy-ssl-in-homelab-dns01/ To try everything Brilliant has to offer-free-for a full 30 days, visit brilliant.org/Wolfgang/ The first 200 of you will get 20% off Brilliant’s annual premium subscription
@SirWinnieThePooh Жыл бұрын
Not related but I love your content man, keep it up
@ripaire Жыл бұрын
hi can you please make a video about pterodactyl and it should be running the pannel and the wings in same docker-compose file if you do that i will be very gratefull and thanks for this amazing video
@oussamakarem5744 Жыл бұрын
Thanks for the share, but how about the npm network driver ? i can see no details about it thanks in advance (btw the npm never work for me)
@streambarhoum4464 Жыл бұрын
Hey Wolfgang!! 😊 what about accessing our home lab securely from the outside world without using third party CDN like cloudflare? Please provide us with a solution in a next video?😊🙏🎉
@ferasawwad71 10 ай бұрын
Greetings to you. Do you have an explanation on how to replace the ip address of the carrier that is shown to the world to: domain HTTPS global. With its connection to a number: a computer.
@moritz22 Жыл бұрын
Very nice video, this setup is more convenient than my own dns server. For anyone using a fritzbox router: You have to add your full domain as an exception to the "DNS rebind protection", because the fritzbox does not allow DNS resolution of domain names that point to private ips to protect against DNS rebinding attacks
@saninnsalas Жыл бұрын
This is an excellent tip! Thanks!
@ivangogov7312 Жыл бұрын
Thank you! Now it is working as expected.
@Izuna- 11 ай бұрын
I was looking for this comment. Thanks alot! :)
@RamiKattan 6 ай бұрын
Fixed my issue after pulling my hair for an hour
@LKD70 5 ай бұрын
Hero, thank you for this comment.
@CharlieBasta Жыл бұрын
Yet another great video Wolfgang. Outstanding work. I've been wanting to do this for a while for my homelab and this video is the push I needed. Thank you.
@americanbagel Жыл бұрын
This video could not have come at a better time! I've just started putting together my own home server and I've been driving myself insane with self-signed certificates. Thanks!
@giacomogagliano1526 9 ай бұрын
same here =)
@clabretro Жыл бұрын
This is the simplest way to tackle certs I've seen, definitely trying this! I've been putting it off in my homelab for ages.
@ryanmalone2681 Ай бұрын
Doesn't work with Cloudflare.
@NinjaNips Жыл бұрын
I’ve literally been looking for a tutorial like this for soooooo long 😫😫😫 thank you ❤
@BallerBubi Жыл бұрын
This solution is simply brilliant. I was searching for years for such an amazing and simple solution. Thank you.
@Luniii737 Жыл бұрын
Wow, thank you for this video! I didn't know (or think of) that you could point a domain name to a private IP address. That makes creating SSL certificates super easy like this! Love you
@nightyeve 11 ай бұрын
Thankss ! Love how clear and fast you explain everything
@Andoresu96 Жыл бұрын
wait y'all are using an application to manage your nginx reverse proxy? I was editing config files like a madman here 😭
@voodooyam Жыл бұрын
If you learned by it then there is no lose!
@sugoruyo Жыл бұрын
This is the way.
@rabahfdoul4844 Жыл бұрын
@@sugoruyothis is the way.
@th3fallen 10 ай бұрын
Nginxproxmanager is really nice if you just want a gui and ssl rotation
@codewithlarsy 10 ай бұрын
😮
@MartinKL 7 ай бұрын
Lots of information in this video, thank you. The text-blog was very helpful to see the commands without copying them from the video.
@aravind3626 Жыл бұрын
I've been waiting for this for years...Thank you!!!!!!!!
@chaejunhee 8 ай бұрын
I was almost giving up, but I saw the video and the kind explanation was sweet rain for a beginner like me. Thank you so much
@JmonteroArg Жыл бұрын
This video was right on time! I was exploring how could I deploy things locally without deal with IPs and cert issues. Very valuable info, thanks for sharing.
@MrXana91 4 ай бұрын
Omg this is EXACTLY what i've been looking for for months! Thank you so much! That's a sub
@solidus1983 9 ай бұрын
Thank You, I had been using an SSL per domain, didn't know you could create just one SSL cert. Now i do an have it set up thanks.
@seanys Жыл бұрын
Good to see a well done tutorial on the exact thing I’ve been trying to achieve for ages!
@revilo2208 6 ай бұрын
Tausend Dank Wolfgang. This is exactly what I was looking for. I was this close to setting up my own CA and getting a headache trying to add the root certs to all the devices.
@MegaChiliMac 5 ай бұрын
excellent. exactly what i was looking for. and thank you for having this info in blog post format too.
@MrMoogle Ай бұрын
My man! You are my hero. I've watched so many videos trying to figure out how to do this exact thing and you explained it all so perfectly. And the written guide to accompany it was an added bonus and very much appreciated. Thank you, sir!
@WolfgangsChannel Ай бұрын
No problem 👍
@ayoubthegreat 5 ай бұрын
Thank you for this! It seemed complicated but after following along I got everything working perfectly.
@philliii Жыл бұрын
This is what i have been searching for. Thanks for the super easy to follow video. Saved me lots of pain. Great work. Cheeeeeeeeers!
@senthilrajanr1 3 ай бұрын
I can not thank enough for this video. I was struggling to figure this out and your video helped me. Thank you
@hfrox1 Жыл бұрын
Man this video is exactly what I was looking for. Thank you
@grahammccann8554 8 ай бұрын
Thank you Wolfgang for making this video. Very easy to follow.
@vamshikrishnaanandesi1642 11 ай бұрын
Thank you for this video, have always been wanting to access all my services through https rather than typing in my IP every time but couldn't as I thought it will take some time for me to study the nuances of the process. This has been an easy and fast setup.
@aliaghil1 Жыл бұрын
Great video as always. Thank you for sharing it with us. I am using pfSense in my environment and having HAProxy, however I needed a second proxy manager, your video helped me a lot with setting up the second one. 👍
@pesfreak18 10 ай бұрын
Thank you for the Tutorial. Very good. Just got through everything and it works great.
@Nahga 2 ай бұрын
This was just fantastic. I didn’t know I needed something like this in my life until I saw the video. Very well done thanks a lot.
@TheDmankl Жыл бұрын
Seriously thank you so much for this.... I have been trying to find something like this but no one had a solution for this !!!
@Mhm_Rhm 7 ай бұрын
Great tutorial. To the point. I have been looking for this for a while. Thanks. 😘
@jdfmovil Жыл бұрын
Add portainer to this and you have an easy way to manage all your containers. :)
@electricz3045 Жыл бұрын
Easy it might be defently not efficient. Running shell commands is just faster then navigating around in an GUI to do the same thing.
@fabiandrinksmilk6205 Жыл бұрын
@@electricz3045 This is where we come to the whole CLI vs GUI discussion again. The right answer is of course your personal preference!
@varunaeeriyaulla Жыл бұрын
@@fabiandrinksmilk6205 I agree with you. I have multiple docker servers, including HA. It's much easier to manage with Portainer and portainer agents.
@4crafters597 Жыл бұрын
Yacht for a smaller yet lighter system that still works for basic setups!
@sbx1 Жыл бұрын
Danke Wolfgang, dank deiner Anleitung war die Einrichtung sehr einfach! :)
@rayzerx Жыл бұрын
I didn't know I needed this video until it was recommended to me. Amazing video and great explanations. Thanks for the caption. Greetings from Brazil. ✌🏽
@DaMonkeyFamily 5 ай бұрын
Awesome video, the explanations are just perfect. Thanks a lot mate
@dj_odradeck Жыл бұрын
I use exactly this setup for over a year and it just works flawlessly. Even auro-renewing the let's encrypt cert works without any issues.
@ryanmalone2681 Ай бұрын
No it doesn't.
@gere364 4 ай бұрын
Works like a charm! I love this solution!!
@MrTandrol 2 ай бұрын
Thank you so much! Worked like a charm :)
@rogerwprice 10 ай бұрын
Wow - this is fantastically useful - many thanks - will be exploring more on your channel
@prezmix 7 ай бұрын
Well... Exactly what I was looking for! Thank you
@CreaseysWorkshop Жыл бұрын
Oh man it works so good! Thank you so much.
@GehtGut 5 ай бұрын
Thank you very much for this genius tipp ... !!!! You are the best !!!! Installed and works directly.
@adryanobrum Жыл бұрын
Another great video. Clean and simple. Please, you need to teach us how to configure a home assistant dashboard like yours! 🤟
@makeitcloudy 5 ай бұрын
another great tutorial, awesome stuff, thank you !
@Filamoremedia Жыл бұрын
Awesome video, Wolfgang! I'll have to add this to my lab.
@scotthewitt6047 Жыл бұрын
I set up passbolt last night and have the problem you just solved in this video thank you
@thefallenangel9544 Жыл бұрын
omg I was waiting for a tutorial using precisly docker and DuckDNS together and you just upload this perfect tutorial ! You save my time
@gabrielrechy 10 ай бұрын
Gracias por este valioso contenido, hace tiempo que no encontraba como asignarle certificados válidos a un servicio que estuviera fuera Docker, pero ahora ya me di la idea de como poder solucionarlo gracias a tu vídeo ✌️
@samjiman Жыл бұрын
This is useful, thanks. Waiting for my AML-S905X-CC and then I'll set this up.
@brokenicelight Жыл бұрын
Your Video is like a rescue ring. I had trouble understanding this concept with the traefik guides from Techno Tim but now that you've implementet a sceamtic drawing it helped alot. Thanks! Again a Video to exact right time :D My instructor wanted me to get the basic of dns and teach myself but i was only stuck at this internal external stuff so you safed me :D
@AinzOoalG0wn 7 ай бұрын
did you get this to work for traefik? i need help for that x-x;
@brokenicelight 7 ай бұрын
@@AinzOoalG0wn Sadly not now since i haven't had much time yet. But i want to get it working with traefik. Maybe we could stay connected?
@AinzOoalG0wn 7 ай бұрын
@@brokenicelight i came up with a solution. i shutdown traefik and started up nginx proxy manager instead 🤣 i got it to work kinda. even authentik works with it. just, it only works when my vpn is active. when its turned off, it no longer works 🥲
@AinzOoalG0wn 7 ай бұрын
@@brokenicelight well if u find out a solution plz do share. i had to go back to traefik cause there were some issues in npm i could not resolve 🥲
@adrianmurillo2646 11 ай бұрын
Thank you, sir! This is a great video. For anyone using pfsense on their home network -- with a different domain than your purchased domain for your home lab -- you are going to want to add DNS host overrides for your purchased domain and the hosts that you are going to be proxying, all pointing to the IP address of the nginx proxy manager.
@LeonRohr-xc4re 9 ай бұрын
could you please explain further? Im having trouble on setting this up using my pfsense
@EricKoehler-dc5or 7 ай бұрын
could you please show this step, maybe in a short video? pFsense drives me crazy :(
@ClassicCarOverhaul 6 ай бұрын
Thanks, was pulling my hair out until I did dns host ovreride and it worked!
@yotu9670 Жыл бұрын
sweet. never thought of this option. thanks
@xellaz 6 ай бұрын
This worked great on putting https secure connection locally on my new Raspberry Pi 5 running CasaOS! I just had to do a few modification on the ports and IP addresses but everything worked correctly at the end! Thanks! 👍
@vikingursigurdsson4985 Жыл бұрын
Thai is exactly what i was looking for. Thank you
@nixxblikka Жыл бұрын
This is a game changer - excellent video
@Izuna- 11 ай бұрын
Thank you for this great video! Really helped me a lot! :)
@DrathVader 2 ай бұрын
I finally got to set this up after watching the video months ago. I should have set up proxies long ago, much more convenient. One thing to mention is that this method works well with tailscale as well. I just put my server's tailscale IP instead of local network IP and it works perfectly. Really useful for privately sharing linux isos with friends.
@LeandroLemos1 3 ай бұрын
Amazing video! thanks by the help !
@rustedtrust3923 6 ай бұрын
This is awesome, thank you!
@yerunski Жыл бұрын
I'm only 1 min. 20 secs in the video and already hit the like button. I'm sure this will be better then my self signed certificates :)
@matuopm 7 ай бұрын
I have been looking for this for a long time :D
@nastynaza 11 ай бұрын
Thank you! I managed to get this working with AWS Route53. The only difference is that the wildcard record needs to also be an A record, not a CNAME.
@topkek5378 3 ай бұрын
you're a lifesaver
@XRedShark 9 ай бұрын
Thank you! Great explain
@andrewlowe4130 10 ай бұрын
Excellent. Thank you!
@RazoBeckett. 11 ай бұрын
thanks alot dude you made my project way cooler and legitimate
@Knufle 7 ай бұрын
Btw, great video! Thanks for explaining everything in such a concise and easy to understand manner. Just a heads up, apparently this method doesn't fully work on Chrome if you have Safe Browsing Standard or Enhanced protection enabled, for me I get the "Deceptive site ahead" warning for some of my local apps, like Jellyfin for example, but I don't get the warning for other apps like Code Server, so idk, just wanted to let you know. On Firefox I don't get warnings no matter what though, so that works just fine.
@MrEric377 3 ай бұрын
Thank you so much for this video, 1 thing I don't think anyone ran into is I had to wait almost a day for my registrar to reflect the IP changes. 🤦Now that I found you I'm going to look through your other video's Thanks again.
@RaidOwl Жыл бұрын
NPM is freakin awesome. It's crazy how easy it is to get setup and going with it and boom...you've got proper SSL and routing.
@falxie_ Жыл бұрын
As (unfortunately) a JavaScript developer I was very confused by this statement for a moment
@pieteryts Жыл бұрын
not quite for me... since I'm not a linux users 😂 mostly I used DNS domain record check for let's encrypt.
@RaidOwl Жыл бұрын
@@falxie_ haha yeah I have to think twice when seeing "NPM" now
@pavelperina7629 Жыл бұрын
@@falxie_ nginx proxy manager. Yes, I barely touched JS and I had to ask chatgpt (which is suprisingly good for setting up simple stuff and writing simple shell script
@asandax6 Жыл бұрын
NPM is very confusing when you're not referring to Node Package Manager.
@malteneuss8058 Ай бұрын
This is such a great feature for self-hosting. Thanks for sharing. It's worth noting that some routers like Fritzboxes have a "DNS rebind protection" where you must add an exception. Otherwise you will bang your head against the wall why it doesn't work, like i did.
@luisgustavocoutowacker8565 22 күн бұрын
Amazing explanation! So damn easy! Thanks for that
@bjarnuhuh Ай бұрын
You are an absolute legend for this video! I've been trying to fix my reverse proxy and could not get it to work. The "Propagation Seconds" change was an absolute saver! Thanks!
@Glatze603 9 ай бұрын
Hi Wolfgang, good content! A video about this topic and authelia would be awesome.
@MatiMape 5 ай бұрын
Epic tutorial. Worked like a charm in a Raspberry Pi 4.
@ilyafalaleev6196 Жыл бұрын
Perfect, just in time, that's really so easy, thanks for the complete tutorial it was helpful.
@RamiKattan 6 ай бұрын
Greatest tip ever, worked on the second try
@efmneto Ай бұрын
Amazing video! Congrats from Brazil! :)
@yeastdonkey846 6 ай бұрын
Great video. Got me up and running when I first set up npm. I changed to custom certs from Cloudflare, which last for 15 years though.
@justintongol7581 5 ай бұрын
Hey man, I'm curious. How is yours setup?
@yeastdonkey846 5 ай бұрын
@@justintongol7581 in terms of the CloudFlare cert? I just setup all my dns records through cloudflare and set them to proxied. Then I generated a cloudflare origin cert and imported them into npm. I also set my encryption on cloudflare to strict mode.
@mr.mentat.0x 11 ай бұрын
Dude... this intro speaks directly to my soul. Completely spot-on how it feels. The Blade Runner segment is perfect. Going to do this on my home lab, that's turned into something I'd see in the field, at work. Too funny man 😂😂 *joined* 😂😂❤
@cyclemoto8744 3 ай бұрын
Great tip! thanks for sharing. Cheers from OZ
@idoiteveryday Жыл бұрын
Useful video. Thank you.
@brunosolothurnmann9205 Жыл бұрын
Thank you - as I use Pi-hole, I had to add entries to the pi-hole local dns with the (sub-)domain names pointing to the proxy-manager. After that it run as you explained it.
@gibberingidiot 5 ай бұрын
Thank you - just saved me a lot of head scratching...
@richardrussell5165 4 ай бұрын
you saved me soo much stress
@m.jamilrahman4971 9 ай бұрын
working very well thanks bro 😁😁
@EconaelGaming 4 ай бұрын
Danke Wolfgang! I find it absurd that we need to jump through these hoops, just to have valid SSL in our home networks, but you made those hoops much easier to jump through :)
@clairerovic Жыл бұрын
Luv this... Thanks heaps 🥂
@thomasmiller4625 Жыл бұрын
"Don't worry about it! Not every bad thing in life is your fault." Thanks man I needed that.
@tonysgonewild 7 ай бұрын
Clever idea, excellent video.
@alterX2ego Жыл бұрын
Another banger video!! TY!!
@NicolaSelenu Жыл бұрын
this is EXACTLY what I was looking for. You are a lifesaver! (I know I know.. first world problems)
@MaksOuw Жыл бұрын
I did not known Nginx Proxy Manager, I'll give it a try tonight to remove my Nginx and custom configurations (so I'll have to dockerize every app I use + maybe it's time to use Ansible to avoid making everything by hand haha). Thanks for the tutorial !
@dannysung3397 4 ай бұрын
Pretty awesome and relatively easy to setup! One issue I noticed is that Safari password autofill treats everything under the proxy as the same site... meaning it will suggest passwords for services with different hostnames. This can get a bit unwieldy if you have a lot of services with their own username/passwords.
@MarcDANIELLAMAZIERE 9 ай бұрын
Thanks great tutorial
@G1esas 3 ай бұрын
Worked flawlessly, ty
@G1esas 11 күн бұрын
Future me is here, and i forgot how i managed to have easy acess to the "nextcloud # duckdns" - via other networks. I have 0 idea what i've done in that moment, but i was able to acess my things outside local network, it may be not secure as it should, but it worked pretty well for my needs. Now, my knowledge been forgotten, and i have 0 idea how to restore it, cuz it doesnt mentions in the vid.
@prashkd7684 10 ай бұрын
Thank you for creating this video. If possible, can you create another video showing explaining the theory behind the interaction between client browser, the duckdns server and the NAS ?
@tentickterror8308 Жыл бұрын
i like the way you tilt your head to the right
@NameyNames Жыл бұрын
Very interesting idea, I really should try it out since I'm pretty sick of the constant nagging caused by self-signed certs in my home network. 😑👍
@turbo2ltr 5 ай бұрын
Great video! I've been wanting to get the mess of homelab services I have running all willy nilly standardized like this. Currently using CF tunnels, but I like self hosted much better.
@wukerplank Жыл бұрын
Learned something new, I wasn't aware that Letsencrypt can do wildcard certificates by now 🙌
@JasonWitmerYT Жыл бұрын
Great video!
@user-co9be5eu7e Жыл бұрын
Thank you for this video. I have set it up at home, no longer public visibility for some services. Combined with Tailscale router (to access your local networks), it rocks !
@Knufle 7 ай бұрын
Hey, your comment is exactly what I was looking for, I'm trying to also setup Tailscale alongside Nginx like in the video, but Tailscale also uses port 80, how did you manage it?
@Knufle 7 ай бұрын
Nvm, I got it working, for some reason when I had CasaOS installed as a container before installing NPM, I'd get trouble installing NPM's container, however if I install NPM, configure it and only afterwards install Tailscale then it works just fine.
@Knufle 7 ай бұрын
Although, on a separate note, how do you access your local environment using Tailscale when you're outside of your local network? Since duckdns points to a local IP, it doesn't really work for me outside of my local network, could you explain what you did?
@user-co9be5eu7e 7 ай бұрын
@@Knufle I use Tailscale router to expose the network where the DNS entry resolves.
@user-co9be5eu7e 7 ай бұрын
@@jims888 You have to use tailscale subnets to reach your ip addresses.
@jdb6284 11 ай бұрын
exactly the issue i was pulling my hair out of a few weeks ago. Had no idea something like this existed, thanks man!
Oddly Satisfying
Рет қаралды 50 МЛН
Craft Computing
Рет қаралды 1,2 МЛН
Raid Owl
Рет қаралды 350 М.
OneMarcFifty
Рет қаралды 35 М.