Lighttpd not listening on WG interface at boot

[arkanoid]

Hello

I want to have opnsense web config served on LAN and WG interfaces, and leave WAN for haproxy, but if a wireguard interface is selected in "System: Settings: Administration" as listening interface for HTTPS it is ignored at boot, but it works when applied manually after boot.

"sockstat -4 -l" shows that lighttps is NOT listening on wireguard interface after boot

So I have a configuration that works before rebooting, and works again after boot if and only if I reapply the very same listening knterfaces preferences.

how can I fix this?

Thanks

[Monviech (Cedrik)]

Well, yeah, as stated in the docs.

https://docs.opnsense.org/manual/settingsmenu.html#listen-interfaces

[arkanoid]

Thanks for the answer, you're right.

I give up with the idea to serve webconfig internally on port 443

thanks

[Monviech (Cedrik)]

You could, by reverse proxying it.

For example with Caddy.

https://docs.opnsense.org/manual/how-tos/caddy.html#reverse-proxy-the-opnsense-webgui

But I'm sure you can also reverse proxy it someway with HA Proxy.