Topics

Hello,
I have strange problem and i can't find what can be the root of it. I set up AdGuardHome (mimugmail repository). It works very well, with AGH working on port 53 and Unbound on 5353 (for registering in AGH DHCP leases). However, after setting VIP addresses for HA (HA is working perfectly), AGH is not working on VIP interface (but it is normally listed in AGH setup). When i try to nslookup different domains via VIP interface address, nslookup times out and OPNSense nor AGH don't even show anything in logs (Firewall, general, backend and AGH log). Unbound works well on VIP via 5353 port so it is clearly not entirely VIP interface fault but rather AGH using VIP interface bug.

I know this is community repository and not directly related to OPNSense, but maybe someone has any idea how to try to debug this?

Hello,
Anyone tried to build OPNSense for RPI4? I saw that there is already uboot for rpi4 and FreeBSD is also supposed to work on it. I tried to build it myself with opnsense tools but after adding new device config (copy paste RPI2) and replacing arch to arm64:aarch64 and paths to uboot and firmware, building still failed.

I'm not well versed in build with opnsense tools, maybe someone had more luck?

Hello,
I have problem with finding the path where are stored generated by acme certificates in OPNSense (using 19.7.8
AMD64 right now). I'm using os-acme-client for generating wildcard SSL, which i would like later to distribute to other home servers.

My first attempt for that was to use Automation part of acme client with Upload to SFTP but somehow it doesn't work. I enabled it and added in automation section when defining certificate generation procedure. Test connection is ok, but i didn't see for it to be triggered when renewing certs, logs don't show anything.

Second attempt is then manually copy certs. I followed tips from this topic:
https://forum.opnsense.org/index.php?topic=8865.msg39661#msg39661
but as far as specified there path exist ("/var/etc/acme-client/home/"), those are always empty.

Any idea how to tackle it?