Messages

1

24.7 Production Series / Re: After Upgrade to 24.7.8 - NGINX Location DANGER error

« on: November 09, 2024, 11:00:06 am »

I switched back to 24.7.6 (thanks to ZFS snapshots  ) and ngix is working fine now.

So I think in my case it is better to wait for the next version 24.7.9 

2

24.7 Production Series / After Upgrade to 24.7.8 - NGINX Location DANGER error

« on: November 09, 2024, 10:45:40 am »

After updating to 24.7.8 I have a problem with nginx.

When I want to add a new location, an error message appears. There is also NO entry in the log.

Does anyone have an idea what the problem could be?
It always worked before. It doesn't matter whether something is configured in the location or not. This error message appears.

Add new Location:


The error message:


Thanks in advance .

Micha

3

Hardware and Performance / Which Protectli Vault for Wiregard 300MBit down / 150 MBit up?

« on: September 20, 2024, 07:33:51 pm »

Hi,

can anyone recommend a Protectli Vault model (4 ports should be enough)?
It is important that WireGuard runs very efficiently. Fiber 300Mbit down / 150 MBit up.

Other services that should still run: VLAN, NGINX, ACME, OPNvpn and possibly Zenarmor in the future.

Is the V1410 the right device?
Or rather the VP2420 with 16 GB RAM?

Thank you in advance.

Regards,

Micha

4

Development and Code Review / Re: os-caddy plugin

« on: August 11, 2024, 03:27:41 pm »

Plugin was merged into OPNsense Plugins, I won't post in this thread anymore.
https://github.com/opnsense/plugins/pull/3840

- More DNS Providers added: netlify, namesilo, njalla, vercel, googleclouddns, alidns, powerdns, tencentcloud, dinahosting, metaname, hexonet, ddnss, linode, mailinabox, ovh, namecheap, azure, openstack-designate.
- More input fields and better documentation added for the DNS Provider API Keys.

Hi.

Is os-caddy working with Strato (DYNDNS) ?

5

Web Proxy Filtering and Caching / Re: NGINX - How to change upload_max_filesize from default 1M to 100M

« on: January 14, 2024, 06:59:58 pm »

Thank you @Fright.

The problem was really the backend settings from proxmox container.

6

Web Proxy Filtering and Caching / Re: NGINX - How to change upload_max_filesize from default 1M to 100M

« on: January 07, 2024, 12:58:06 pm »

Hi,

I changed client_max_body_size to 200MB and restarted NGINX.

But the error always appeard.

Request is larger than the maximum file size the server allows

7

German - Deutsch / Re: OPNsense - NGINX => Ghost Webseite

« on: January 07, 2024, 10:09:27 am »

ist gelöst, siehe https://forum.opnsense.org/index.php?topic=37936.0

8

Web Proxy Filtering and Caching / [SOLVED] NGINX - How to change upload_max_filesize from default 1M to 100M

« on: January 06, 2024, 09:31:19 am »

Hello,

how can I change the upload_max_filesize from default 1MB to 100 MB?

Picture upload is not possible with 1MB to Wordpress or ghost.

Hope, anyone can help me. 

Best regards,
Michael

9

Web Proxy Filtering and Caching / Re: OPNsense - NGINX => internal website

« on: January 05, 2024, 04:13:17 pm »

I have tweaked a few things. It works now. 

Changed the following:
Upstream Server: Port changed to 443
Upstream: TLS Enabled = TRUE
Location: Force HTTS = FALSE

Many thanks for your support @Monviech .
That gave me the decisive food for thought.

10

Web Proxy Filtering and Caching / Re: OPNsense - NGINX => internal website

« on: January 05, 2024, 03:11:11 pm »

Thank you for your help.

The location is always website.example.com (see logfile attached).

Do you have any ideas what the problem could be?

11

Web Proxy Filtering and Caching / [SOLVED] OPNsense - NGINX => internal website

« on: January 05, 2024, 01:36:26 pm »

Hello,

I have installed the ghost.org system (website, running on Proxmox).

It works very well locally.
IP: 192.168.5.55

Unfortunately I can't get to the page via url. I used NGINX in the OPNsense for this purpose.

That is my configuration in OPNsense

Dynamic DNS:
(works fine) website.example.com

ACME Client:
SSL-Certificate: (works fine), ACME-Status OK website.example.com

Firewall - Rules - WAN:
Protocol: IPv4 TCP
Source: *
Port: *
Destination: WAN address
Port: 80,443  (as ALIAS)
Gateway: *
Schedule: *


I have configured the following in OPNsense - Services - Nginx:

General Settings:
Enable nginx: TRUE

Upstream Server:
Description: Website
Server: 192.168.5.55
Port: 80
Server Priority: 1
Max. Connection: 1000
Max. Failures: 10
Fail Timeout: 900

Upstream:
Description: Website_Pool
Server Entries: Website
Load Ballancing Algo: Weighted Round Robin
Enable TLS (HTTPS): FALSE
nothing more configured on this page

Location
Description: Website_location
URL Pattern: /
Upstream Servers: Website_Pool
Force HTTPS: TRUE
nothing more configured on this page

HTTP Server
HTTP Listen Address: 80
HTTPS Listen Address: 443
Default Server: FALSE
Server Name: website.example.com
Location: Website_location
TLS Certificate: website.example.com (ACME Client)
Client CA Certificate: R3 (ACME Client)
Enable Let's Encrypt Plugin Support: TRUE
HTTPS Only: TRUE
nothing more configured on this page

Unfortunately I get an error message when calling https://website.example.com
This page isn’t working
website.example.com redirected you too many times.
ERR_TOO_MANY_REDIRECTS

Does anyone have any idea what could be causing this?
Somehow I can't find the error.

Thank you for any advice.

Best regards

Michael

12

German - Deutsch / [SOLVED] OPNsense - NGINX => Ghost Webseite

« on: January 02, 2024, 09:50:02 am »

Hallo zusammen,

ich habe unter Proxmox das ghost.org System (website) installiert.

Lokal läuft das sehr gut.
IP: 192.168.5.55

In der OPNsense folgendes bereits konfiguriert

• Dynamic DNS: Funktioniert webseite.example.com
• ACME Client: SSL-Certificate: Funktioniert, ACME-Status OK webseite.example.com
• Firewall - Rules - WAN:
• Protocol: IPv4 TCP
• Source: *
• Port: *
• Destination: WAN address
• Port: 80,443  (als ALIAS)
• Gateway: *
• Schedule: *

In OPNsense - Services - Nginx habe ich folgendes konfiguriert:

General Settings:

• Enable nginx: TRUE

Upstream Server

• Description: Webseite
• Server: 192.168.5.55
• Port: 80
• Server Priority: 1
• Max. Connection: 1000
• Max. Failures: 10
• Fail Timeout: 900

Upstream

• Description: Webseite_Pool
• Server Entries: Webseite
• Load Ballancing Algo: Weighted Round Robin
• Enable TLS (HTTPS): FALSE
• ansonsten nichts mehr eingestellt

Location

• Description: Webseite_location
• URL Pattern: /
• Upstream Servers: Webseite_Pool
• Force HTTPS: TRUE
• ansonsten nichts mehr eingestellt

HTTP Server

• HTTP Listen Address: 80
• HTTPS Listen Address: 443
• Default Server: FALSE
• Server Name: webseite.example.com
• Location: Webseite_location
• TLS Certificate: webseite.example.com (ACME Client)
• Client CA Certificate: R3 (ACME Client)
• Enable Let's Encrypt Plugin Support: TRUE
• HTTPS Only: TRUE
• ansonsten nichts mehr eingestellt

Leider bekomme ich beim Aufruf von https://webseite.example.com die Fehlermeldung:
This page isn’t working
webseite.example.com redirected you too many times.
ERR_TOO_MANY_REDIRECTS

Hat jemand eine Idee, woran das liegen könnte?
Irgendwie finde ich den Fehler nicht.

Bin Dankbar für jeden Hinweis.

Beste Grüße

Michael

13

German - Deutsch / Sunny Valley Zenarmor (Sensei) Lizenz verkaufen

« on: September 02, 2023, 10:40:37 am »

Hallo zusammen,

kann mir jemand sagen oder einen Hinweis geben, ob und wie es möglich ist, eine Zenarmor (Sensei) Lizenz zu verkaufen?
Habe eine gültige Lizenz, die ich aber auf Grund meiner Hardware nicht sinnvoll nutzen kann.

Vielen Dank

14

German - Deutsch / Re: NGINX startet nicht mehr nach Update auf OPNsense 23.1.5

« on: April 02, 2023, 08:33:34 pm »

Vielen Dank.

Das war der Entscheidende Hinweis. Kann mich jedenfalls nicht entsinnen, dass ich dort was eingestellt habe.

Jetzt funktioniert es wieder.

Beste Grüße

Micha

15

German - Deutsch / Re: NGINX startet nicht mehr nach Update auf OPNsense 23.1.5

« on: April 02, 2023, 12:37:22 pm »

Danke für deine Antwort.

Wie kann ich die Config aufrufen ?

Sorry, bin absoluter Neuling in dem Thema und für jede Unterstützung sehr dankbar.

Beste Grüße

Micha