Messages

TL;DR - What condition/s do I need to setup to watch for a requested host with this pass through reverse proxy and my nextcloud server with a self-signed certificate?


I have OPNsense 18.7.10 running in front of my home network which includes a Nextcloud server with currently just a self-signed certificate. I can reach my Nextcloud via ipv6, no problem. All of my computers get an ipv6 address via SLAAC from my ISP.

Sometimes, ie from work, I don't have access to ipv6 and so need to setup a reverse proxy so I can access via my single dynamic ipv4 address that the ISP provides.

So far I have been able to get this to work only by setting my Nextcloud backend to be the default backend for the frontend that is listening on port 443. This isn't a long term solution though, since I'd like more that one server to be able to be accessed on port 443.

I have been through many hours of googling and trying perhaps a dozen guides / posts (OPNsense ones, pfsense ones, and general HAProxy ones) to get this to work. But, every time I add a condition / rule pair to point to the Nextcloud server I either get a browser SSL error or a timeout; depending on what options I've set.

I'd like to keep this as a pass though proxy, with the hosts handling certificates. What condition/s do I need to setup to watch for a requested host with this pass through reverse proxy and my nextcloud server with a self-signed certificate? Watching for hostname gets me a timeout. Because the request is encrypted (I think. New learner here) And using SNI get's a SSL error in the browser.

Just a quick update in case anyone else has the same question. It worked well. Just a small hiccough. Just had to reinstall the plugins, like suricata, that don't come pre-installed. Once I did that, they found my previous configuration and started right up.

Thanks again for  a great project!

I was hoping it was that easy! Just worried that with new features / layout and totally different  hardware, that it wouldn't work.

I'll give it a try!

Is it possible to install 18.7 on a new machine while also bringing my settings from 18.1 from my old machine? I'd really like to avoid taking dozens for screenshots and hand typing everything in or breaking anything!  :o

Background, old install on a ancient 32bit Asus laptop. New install will be on a HP thin client. Hardware is updated and ready to go. But, I'm a relative noob to opnsense and my old install was setup a little at a time with lots of googling. I'm trying to avoid repeating all that googling!