Messages

1

20.7 Legacy Series / Re: nginx auth issues with Exchange 2016/IIS 401 loop

« on: January 29, 2021, 03:50:09 pm »

AFAIK you can only buy that version from the vendor and maybe you can install that manually. This version cannot be used with the OPNsense Plugin UI as you will miss some required compiled in extensions (for example the WAF)

2

Web Proxy Filtering and Caching / Re: NGINX: Can I use URL Pattern Matching to reverse proxy to different servers?

« on: January 20, 2021, 10:21:42 pm »

I had something like this in the past - cannot remember the exact config

location ~ ^/context(?<apppath>.*)$ {
  proxy_pass http://upstream-name:port$apppath;
}

3

Web Proxy Filtering and Caching / Re: NGINX: Can I use URL Pattern Matching to reverse proxy to different servers?

« on: January 19, 2021, 08:11:43 pm »

Wenn der Präfix hinten wieder weg soll, würde ich da eher die upstream url umschreiben und dabei keine rewrite Regel nehmen sondern location mit regex und dann im Path prefix referenzieren.

4

20.7 Legacy Series / Re: How to enable &quot;reverse-search-history&quot; in opnsense shell?

« on: January 19, 2021, 08:00:43 pm »

CTRL + R is AFAIK a feature of GNU readline and not a feature of a shell. Since zsh does not build on readline, you can use that if you install that or you can use a readline based shell like bash if you install it.

5

Web Proxy Filtering and Caching / Re: NGINX: Can I use URL Pattern Matching to reverse proxy to different servers?

« on: January 18, 2021, 11:38:37 pm »

Just use the default match type. Yours is not a regular expression.

The default is path contains.

6

Web Proxy Filtering and Caching / Re: NGINX: Can I use URL Pattern Matching to reverse proxy to different servers?

« on: January 18, 2021, 05:24:53 pm »

you can just use multiple locations and assign them to the same HTTP Server

/
/docs
/music

Each of them has a different upstream.

7

Web Proxy Filtering and Caching / Re: nginx error landing page -- possible to customize?

« on: January 11, 2021, 09:19:04 pm »

In theory the stream certificates should be exported to files:
https://github.com/opnsense/plugins/blob/master/www/nginx/src/opnsense/scripts/nginx/setup.php#L148

8

Web Proxy Filtering and Caching / Re: Nginx SSL termination lag

« on: January 10, 2021, 10:25:42 am »

For me, one minute sounds like a timeout.

What nginx probably does differently is that it by default uses HTTP 1.0 in the backend while browsers use 1.1 or 2 if available. This may cause more TCP connections to be opened since 1.0 closes them by default after use.
The nginx plugin has an advanced option to switch to 1.1 for websockets. You may give that a try.

That is the only thing I can guess because this sounds more like a network timeout. BTW: AFAIK the timeout can be reduced as well.

9

Web Proxy Filtering and Caching / Re: nginx IP ACL List -- how to automate?

« on: January 10, 2021, 10:18:05 am »

everything is stored in config.xml but you probably like to write a custom cron script you can run automatically or use the API provided by the plugin. The UI is using the API as well so you can just dump its requests from the developer console.

10

Web Proxy Filtering and Caching / Re: nginx error landing page -- possible to customize?

« on: January 10, 2021, 10:13:23 am »

This feature is already provided and might find its way into a future version :

https://github.com/opnsense/plugins/pull/2149

11

20.7 Legacy Series / Re: opnsense broadcast itself's serial number UUID IP via some discovery proto?

« on: January 10, 2021, 10:06:41 am »

You may have a service enabled that does this. FRR uses Broadcast and Multicast for example.

12

German - Deutsch / Re: Nextcloud Backup auf eingebundenen externen Speicher

« on: January 10, 2021, 09:48:02 am »

Die Nextcloud URL soll direkt auf die Nextcloud zeigen (ohne abschließenden slash) und im Verzeichnis steht dann das Unterverzeichnis für die Backup Dateien drin.

/Nextcloud data root / User ID / files / <pfad>

Da OPNsense über WebDAV zugreift, kann es zusätzlich zu Problemen kommen, wenn der Webserver nicht ordentlich konfiguriert ist.

13

Web Proxy Filtering and Caching / Re: opnsense Nginx, website on synology webstation

« on: December 28, 2020, 06:24:23 pm »

If you do not point nginx to anything, it will serve the content fom the default directory which should be empty. No need to involve a 3rd party application.

14

Web Proxy Filtering and Caching / Re: opnsense Nginx, website on synology webstation

« on: December 27, 2020, 10:17:43 pm »

This is how nginx works, It will choose the first server if there is no default if none of them is matching. I do not know a way to turn off this behaviour entirely.

15

Web Proxy Filtering and Caching / Re: opnsense Nginx, website on synology webstation

« on: December 26, 2020, 08:50:57 am »

If you enable the automatic certificate creation on OPNsense, you cannot use the HTTP-01 challenge type on your NAS. That is all. If you use the DNS challenge on your NAS, both will work. The good thing is that you do not really need a public trusted certificate there because nginx will replace it by Let's Encrypt so you have a publicly trusted certificate there and you can use your internal CA on your home which needs to be trusted by OPNsense.