Messages

I thought it might be bad practice to make a separate post, so I'm putting my request for help under this thread.

So I tried to follow the tutorial, but I'm still having issues with setting up a reverse proxy for my internal services. I don't need ACME and Let's Encrypt since I'm running everything locally and I'm lazy, so I tried to skip that stuff.

My desired domain for my Docker services is homelab.internal, so like jellyfin.homelab.internal, immich.homelab.internal, etc. They're all running in Docker on a Debian VM in Proxmox; the VM IP is 192.168.10.247 and I can access these services at the IP + port number (i.e. 192.168.10.247:2283 for Immich). I'm not sure if I had to make an override or not, but I did anyway with Unbound and made it like this:

Host = *
Domain = homelab.internal
Type = IPv4
IP = 192.168.10.247

nslookup resolves in both OPNsense shell and on my laptop (connected to the same VLAN Network that Proxmox is on), I can ping the domain name in terminal

I have the firewall rules set up to allow http and https traffic from any source to destination This Firewall. The direction is "In" and it's set on my LANs/VLANs, not my WAN. Do I need to enable this on WAN too?
You cannot view this attachment.

After that I did the suggested defaults in Caddy general settings (ACME email, auto HTTPS). I then followed the Reverse Proxy steps to get this:
You cannot view this attachment.
You cannot view this attachment.

Here's my Caddyfile too:

Code Select Expand

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
}

servers {
protocols h1 h2
}

email [redacted]
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


immich.homelab.internal {
handle {
reverse_proxy 192.168.10.247:2283 {
}
}
}

import /usr/local/etc/caddy/caddy.d/*.conf

I can't resolve to the website whether I put http, https, the port number, anything. What else am I missing?