pfSense, nginx reverse proxy and letsencrypt
I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.
Setup is as follows:
-> 192.168.0.4 www (apache2)
Internet -> pfSense -> rproxy (nginx) |
1.2.3.4 (public) 192.168.0.3 -> 192.168.0.5 mail (apache2)
I can connect to www and mail using http / port 80, but I need https.
How to set up nginx for https reverse proxy, my current setup is simple:
server {
listen 80;
server_name www.domain.ovh;
location / {
proxy_pass https://192.168.0.4:80;
}
}
server {
listen 80;
server_name mail.domain.ovh;
location / {
proxy_pass https://192.168.0.5:80;
}
}
How to get letsencrypt to work with this setup.
I also use letsencrypt for smtp / imap so the certs need to be on the mail host.
I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.
nginx pfsense reverse-proxy letsencrypt
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
add a comment |
I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.
Setup is as follows:
-> 192.168.0.4 www (apache2)
Internet -> pfSense -> rproxy (nginx) |
1.2.3.4 (public) 192.168.0.3 -> 192.168.0.5 mail (apache2)
I can connect to www and mail using http / port 80, but I need https.
How to set up nginx for https reverse proxy, my current setup is simple:
server {
listen 80;
server_name www.domain.ovh;
location / {
proxy_pass https://192.168.0.4:80;
}
}
server {
listen 80;
server_name mail.domain.ovh;
location / {
proxy_pass https://192.168.0.5:80;
}
}
How to get letsencrypt to work with this setup.
I also use letsencrypt for smtp / imap so the certs need to be on the mail host.
I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.
nginx pfsense reverse-proxy letsencrypt
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33
add a comment |
I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.
Setup is as follows:
-> 192.168.0.4 www (apache2)
Internet -> pfSense -> rproxy (nginx) |
1.2.3.4 (public) 192.168.0.3 -> 192.168.0.5 mail (apache2)
I can connect to www and mail using http / port 80, but I need https.
How to set up nginx for https reverse proxy, my current setup is simple:
server {
listen 80;
server_name www.domain.ovh;
location / {
proxy_pass https://192.168.0.4:80;
}
}
server {
listen 80;
server_name mail.domain.ovh;
location / {
proxy_pass https://192.168.0.5:80;
}
}
How to get letsencrypt to work with this setup.
I also use letsencrypt for smtp / imap so the certs need to be on the mail host.
I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.
nginx pfsense reverse-proxy letsencrypt
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.
Setup is as follows:
-> 192.168.0.4 www (apache2)
Internet -> pfSense -> rproxy (nginx) |
1.2.3.4 (public) 192.168.0.3 -> 192.168.0.5 mail (apache2)
I can connect to www and mail using http / port 80, but I need https.
How to set up nginx for https reverse proxy, my current setup is simple:
server {
listen 80;
server_name www.domain.ovh;
location / {
proxy_pass https://192.168.0.4:80;
}
}
server {
listen 80;
server_name mail.domain.ovh;
location / {
proxy_pass https://192.168.0.5:80;
}
}
How to get letsencrypt to work with this setup.
I also use letsencrypt for smtp / imap so the certs need to be on the mail host.
I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.
nginx pfsense reverse-proxy letsencrypt
nginx pfsense reverse-proxy letsencrypt
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
edited Dec 27 '18 at 18:51
Andrzej
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
asked Dec 27 '18 at 17:22
AndrzejAndrzej
365
365
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33
add a comment |
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388180%2fpfsense-nginx-reverse-proxy-and-letsencrypt%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388180%2fpfsense-nginx-reverse-proxy-and-letsencrypt%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Hi Scott, thanks a lot ;-) everything looks good.
– Andrzej
Dec 27 '18 at 18:33