Opnsense HAProxy lets encrypt setup with SSL docker containers

Started by newbee, August 15, 2021, 07:36:27 PM

Previous topic - Next topic
Hi,

Thanks to @TheHellsite for his HAproxy setup. My reverse proxy with letsencrypt is setup. This is a different approach to what i am used to. Normally the local system manages the certificate. So how do we handle SSL on traefik docker containers? EG. My nextcloud is running but cert is invalid. I guess the same applies to other docker-compose.yml setup where many containers use acme letsencrypt to get certs.

Did you have any success with the config? I have a docker php-fpm and nginx setup with a traefik in front too.

It's simple. The solution is to use SSL passthrough for the connections that you dont want to terminate in HAProxy.
2x 25.1.9 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

Pffff.... i have been breaking my head to find the config in opnsense...