Help required with NGINX Reverse Proxy

[tomclewes]

Environment:
Single OPNsense 20.1.7-amd64 firewall (virtualised)
ISP Router > OPnsense Router with 80 & 443 port forwarded

I know my ISP router is not the issue as I can see the traffic hitting the OPNsense firewall logs.

For something that should be simple this is certainly causing a lot of frustration.

I am trying to get NGINX to work and act as a reverse proxy. The long term goal is to have a Wordpress server and Nextcloud server running concurrently on 443 using the one 'WAN IP' which is in effect a private IP as it is sat behind my ISP router.

I have ensured my OPNsense firewall port is not using the default 443 and the direct 80 > 443 setting is disabled.

I have checked over the documentation numerous times as well as the OPNsense forum but with no joy. Documentation around required firewall is quite vague but I had it set to:

Source = *
Port = *
Destination 192.168.10.253
Port 443 (HTTPS)

I am not concerned about Nextcloud for the time being and solely focusing on the Wordpress web server. I know the web server works because when I setup NAT and disable NGINX, I can reach it.

I have now removed all settings so that I am back to a clean slate so do not have a NGINX config to provide at this time.

Is someone able to provide a very quick step 1, step 2, step 3 for me to follow and I can then see if I am being completely blind or it is just isn't working. If it continues to not work, I can then pull the NGINX config to see what is going on for a config that should work.

Having looked through the documentation as well as the forum, I have not been able to find an answer to my problem.

Thank you in advance.

[samsonmcnulty]

Not a direct answer to your question but, would you be opposed to running these services in docker as containers and then utilizing something like traefik or nginx as a load-balancer/reverse proxy on the server itself? I'm currently running several wordpress sites and nextcloud in docker with traefik as my reverse proxy and it really simplifies the deployment of new sites and services. Nginx also has a large community for the docker version and can help configure everything. They have plenty of configs available that generally work out of the box.