Just got it, Your videos of higher level stuff are great, these kinds of things never get videos. I guess because the documentation is so good now days, but as much as I love this stuff I don't have the time to tinker and learn what I don't know, so the info is very useful. The critique was one I received in the past for flight instruction, when you love something you love to share the knowledge, but sometimes we can turn into a firehouse of info :D From my comments you can see it is a hard habit to break, hah
I may have lost a few details such as: 1) Network Type: Custom @ 5:20 --> How do you set it up? Is it needed? What's the difference to not using it (in terms of settings/upsides/downsides)? 2) What if I don't have a domain and therefore I can't set cloudflare @14:00 ? I just have a DynDNS pointing to my public IP that I will not really give out
Thanks for the video & documentation, finally got it working after moving from SWAG. For anyone having trouble with getting the certificates issued. It could be that in Cloudlfare the proxy is on while the cert hasn't been issued yet. Turning the proxy off allowed me to request a cert after which I could enable cloudflare's proxy once again.
I've spent probably 10-15 hours trying to get swag and cloudflare working. The reasons you described fit me to a T. I was successful with your guide and I really appreciate it. +1 sub!
Thanks, man! I am running nginx on Truenas, so I had to change values to fit my set up. But I got it working in the end. Took two days and having this video up on a second monitor. Only issue I’m having now is the site will only load in Chrome, not Safari.
This is a life saver. Also, I'd like to highlight, in case with some people, at the end of the process, the domain opens not private page or the router's page, they should check their new domain on some other network to see if it's working or not. They can also connect to a VPN and then check on their network too.
For those getting "internal error" and other issues, I found switching the container from custom to bridge actually fixed my problems, after temporarily disabling the proxy slider on cloudflare. Got SSL from Let's Encrypt working now.
IF YOU ARE GETTING "INTERNAL ERROR"... try disabling "proxied" for your CNAME record in cloudflare, then try again. It should work. At this point, reenable the proxied toggle and everything should work fine.
I’d be really interested to know more about the custom bridge mode you set up for the network. It seems you prefer the custom one over just “bridge” so it would be great to know why and how to set that up! :)
Great video and nice for some updated videos, while space invaders video are very good some are now getting outdated especially if your new to unraid like me thanks again
Hi Nigel, you are correct and technology changes often so staying on the forefront is critical to do justice to our users as well as unRAID who constantly improve their platform. Thanks for tuning in and hope to share more soon
Did the video "skip" or did I miss something? At around the 14 minute mark you add a cname of "proxy" but then do nothing else with it. Are we to add that somewhere in nginx?
I cannot get the DNS and Cloudflare part to work. I have my DNS switched to use CLoudflare now and I get a 552 error when trying to navigate to the cname record I have configured. Now I am sure I am just missing something important. I have an A record that points to my external IP then a CNAME record pointing to that A record. The rest of the config is the same as the video. Do I need to have the docker containers I want to forward to also on a private network within UnRaid? Any guidance is appreciated.
Seriously great video I have done everything and am losing my mind. Each time I try to create a proxy host it fails saying "Internal Error". I have tried so many things and now have a Cloudflare account with a domain that I am not using because I can't figure out these issues. Would it be possible to do a follow up video maybe with some trouble shooting along the way?
Great video, very helpful! Quick question (noob here): At 15:55 what do you mean by create your admin account and set it up all the way before accessing remotely?
I like your video, but I wish it was that easy for me. My domain and DNS provider is namecheap, I am adding the subdomain there as an A Record, pointing to my public IP, I also have other A Records pointing to the same IP, but anyway... In NPM I am adding a new host, with my subdomain, when I follow your steps and click save I get the Internal Error message, at that point I cannot follow the suggestions other users have commented here because I am not using cloudfare. Also, I have tried with different network settings, host, bridge and custom with a static IP, nothing works... I have realized that sometimes I get the error "the domain already exist", so I go to hosts and I see the host there but it is not online, when I try to generate the ssl again and click save, the internal error comes back. Now, I successfully generated a SSL cert for my root domain, however, when I try to open Home Assistant from NPM (yes I am using my root domain with home assistant), it doesn't load the website, I have to manually add the home assistant port at the end (5123), however that works only in my PC, if I load the Home Assistant Companion from my tablet using my root domain, it doesnt work. Home Assistant works when I redirect port 443 in my router to port 5123 in my Home Assistant Pi. So at then I dont know what to do, I basically deleted the container for NPM, I went back and port forward my home assistant as it used to be, I cant use NPM for another application as I wanted (deemix) and I am in square one... I see everybody uses cloudfare and all videos or guides are made for that, but my case is different, I have had my domain for years with namecheap, I have used letsencrypt in VMs using the DNS method with namecheap without any issues, but I cant understand why is it so complicated with NPM. Any help is appreciated. Thanks.
Flawless. Amazing. Got it working across a few subdomains/containers really great... But for some reason I cant get an SSL for Jellyfin ("Internal Error" in NGINX when I try and create the proxy host) and can't get it to work without it either... Hmmm... Gonna have to keep digging.
Need elaboration on setting up access list info. How to setup this fir homeassistant on another machine on another vlan in network. You can do without the cloudflare, you just have to make a sub-sub-domain point to the sub-domain of your duck dns. (Id give an example but my comments been deleted 2 times already, probably because of the examples i gave) that would bw nice to have included if you ever do an updated version of this, not that it it out of date or anything, i just used it to get my setup running in about 30 min...
The next challenge is how to go about setting this up using non-standard ports!! DNS TXT records is one way but I have not figured out how to do this with the UnRaid container
Use the CloudFlare tunnel and avoid ports all together (we did a video on it) Otherwise 80 443 can be forwarded to a different port as long as that is what you set in the container for NPM
I was with you right up until the SSL cert part. I click [Save], it thinks a moment, then I get a generic "Internal Error" banner in red across the top of the dialog. Any idea how to proceed?
If you're using Let's Encrypt then often this means LetsEncrypt is unable to verify your domain so it fails. We prefer using Cloudlfare origin certificates for this. Also, worth checking the logs when that error appears to help you figure out why. Otherwise, the method is definitely still working.
IMPORTANT NOTE FOR FELLOW AUSSIES: One potential issue is your ISP blocking ports 443 and 80. Im with Aussie BB and they do indeed block them, a simple call to support gets them unblocked (also get out of cgnat as well if you haven't already). Took me 3 days of hair pulling to figure that out.
Accessing my subdomain works perfectly! However, when I attempt to access the domain itself - I get SSL handshake failed Error code 525 message. I'm guessing that's due to not having a web server running and hosting a site for the domain?
Hi Ibra! I really like your videos, they're great and helped me so much with my unraid server. One question here: I've been using letsencrypt, then swap and since I watched this video I've been trying NPM with no issues on hosting my docker services but, I've also configured some websites on swap pointing each one to a specific folder, tried to do it with NPM with no luck. What could I be missing? Thanks in advance mate!
im forwarding the ports as you shown (except for 18443, i had to put it as 1443 bc my router couldn’t do that with 443, saying not allowed) and my domain still links to the unraid web gui. I also did the A record of @ leading to my home IP and another A record of www leads to the server IP
I've been thinking about setting up something like this or haproxy on pfsense for a while now, not cause i really want to, but I think I'm going to have to. For years I've just had separate physical network coming off pfsense, nic switch etc. And 1 fqdn with everything pointing directly here, a records, mx, etc, well not my own ns servers, but away. Its worked great. I figured isp would get mad about the whole mx thing and either block or send me a nastly letter or something, but after a couple of years they never have. But i'm really light on 25 so idk, but back to my point: Now I have a 2nd fqdn pointing here as well and there is where problems began and where I find my myself scratching my head as to how to proceed. Another subnet won't help anything with that i don't think. I'm a little out of touch i guess. Oh, and 1 or the domains i have uses cloudflare ns. Your cloudflare vid has kind of changed my mind about how i feel about them. I probably commented there.
Fukken thanks, i was struggling to learn how to configure NGINX reverse proxy and Let's Encrypt, now i won't have to bother configuring HTTPS and certificate on everything i install.
After installing NPM I had to wait about 10 minutes before I could login with the default credentials. Not sure why but it kept giving me a bad user error (user not found, or something to that effect). I couldn't find that documented anywhere, but after about 10 minutes I could get in. Also, I switched from swag container, and got errors when adding the proxy hosts. I switched to CF origin server cert and it took care of the issue. I think LE in NPM was conflicting somehow with certs I already had registered in swag
Yeah could be due to using similar details in the LE certificates which might return a failure as the certificates already exist elsewhere. Using CloudFlare is the best way in my opinion anyway, great job getting it going
So ive done all of these steps, and I have used overseerr as well. When i load overseerr it says you are offline. and there is abutton to press that says reload. No matter what I do it just comes back to that screen.
Why would you port forward the entire unraid server and not just that single docker container? Shouldn't it show up as its own host on your network that you port forward?
We don't forward to the 'whole unraid server'. We forward to the ip and port of the reverse proxy. In this case, the IP is the server, and port is NPM. Alternatively, you can set up separate IP for the container or use a VM. Or use a tunnel, which is how we operate nowadays here and don't open any ports at all.
Hey mate, good to hear an aussie accent on these tutorials. Hoping you can help if you have time. I have set up successfully with sonnarr and radarr. Seems to have no problem with other unraid dockers, but going to docker or web server on another VM is an issue. Currently having issues with a self hosted HUDU install. Works fine by direct IP or port forwarded to direct IP. Soon as I port forward to NPM I get redirect issues. Hudu has SSL (letsencrupt) built in so I have tried turning it off in NPM and various other configs that don't seem to work.
More info: Using Bridge network. If I select SSL-none I get http2 protocol error, and if I select SSL and ony check HTTP2 support I get too many redirects. Have also played with site config files and 'custom locations'. I spent weeks (maybe more) trying to build a reverse proxy server a couple of years ago and gave up. Really would like to get this working so I can host more than one thing. Any help is greatly appreciated. Even pointing me towards another vid or some conscise docs.
@@notoryous2 Yes mate. Turns out I had completely missed a couple of settings. Scheme - HTTPS instead of HTTP and make sure the port is also correct... not always 80 or 443.
Hey I know this is an old vid but could you do a DDWRT video? Like what the best setting a home lab environment and such, greatly appreciate your contents!
I'd love to see a video about the move from spaceinvader one's let's encrypt (swag)/nginx reverse proxy setup to your setup and show us the benefits.. I think most of us have this setup.
Got pretty baffled by this because I previously followed a SpaceInvader tutorial on using DDNS with Cloudflare with my own domain, (resulting in a Cloudflare docker on unraid) so all the duckdns stuff is irrelevant to me. Seems odd that you're using Cloudflare for DNS management but not for DDNS - or am I missing something ? Some gentle constructive criticism, as I do really appreciate your videos: - you have a bit of a habit of saying that something is 'super simple'. In fairness, when you use this comment after a slow paced, step by step explanation, then - because you've just demystified the subject - it's fair enough. However you do also use the phrase after sections that are anything but simple, and I suspect they only strike you as straightforward because you have a top down, 'big picture' perspective most of us watching these videos don't have. I appreciate that it must be very difficult - especially since it's clear that some of Space Invader's videos that are only a couple of years old are already well out of date compared to current best practice. Must feel like trying to juggle a dozen balls at once, so I really do appreciate your efforts, just please bear in mind that your 'simple' isn't necessarily so for some of your thicker viewers i.e. me!
Hi Julian, thank you for your feedback. I appreciate you taking the time to write it up. In regards to the DDNS I actually made a seperate video for that subject which is why it's not mentioned here. As for the phrase I use I can see where you're coming from and I think I say it as a form of encouragement while teaching. I'll see if I can be more mindful about it.
@@IBRACORP No worries mate, I def pronounce stuff wrong all the time and just appreciate the courtesy when someone corrects me in a gentle manner, haha.
this was all working great for me until, for some reason, certbot failed to renew the certs "Failed to renew certificate npm-1 with error: Some challenges have failed." Manually clicking the Renew Cert button in NPM also fails. Is it a port forwarding issue? Ive read that you need to have port 80 staying at port 80 elsewhere on the web. I think for this I had port 80 forwarded to 1880 for NPM in my pfsense.
hey so its not entirely this subject but i have tried running pterocdactyl with nginx proxy manager by putting nginx cli on another port and redirecting via nginx proxy manager but im having a bit of issues getting error of too many redirects and cannot login like i opened a new icognito mode tab and tried to login with multiple emails doesnt work
A great video and it helped guide me off of troubleshooting SWAG. One question relates to managing nextcloud. The reverse proxy works with nextcloud (ie: I can access it through my subdomain), but the nextcloud container gives me a bunch of security errors (The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds, or Your web server is not properly set up to resolve "/.well-known/webfinger".) All of the help documentation assumes .conf files can be manipulated (like in SWAG). How can I do something like this in NPM?
@@ViscountJimmy yeah regardless of what app I try, I can access it from the local IP, but when I press the source in NPM it times out with a 522 error.
Thanks for the video it helped a lot! The only issue Im having is with enabling "Force SSL" option. If that is enabled I am not able to access the website. If it is disabled I have no issues. I am using CloudFlare and have HSTS and always use HTTPS enabled. Any thoughts on how I can get Force SSL working?
Love the video, I have almost the same setup as you here but am having problems when I try and do the certificate. I get an api communication error, do I need to do something in Cloudflare for the certificate request to work properly? I think the port forwarding and stuff is OK because if I don't use ssl I can access the site properly, but that's not ideal obviously. Do I need to set the domain in Cloudflare from "Flexible" ssl settings to "Full" or something else in Cloudflare? I think the problem I am having is to do with the certificate not being issued properly.
I have a quick question, when i added overseer to this, it works on an external whise and internal, however ive noticed that the loading time for the login is very slow. I was wondering if this is because in docker i have my plex media server on the bridge network? I tried adding the plex media server to my custom docker network, which improved the login speed for overseer, however connecting to the media server externally isn't able to be done directly for playing and uses the dreaded plex relay service, is there a step im missing on port forwarding or something that i need to do?
hey great video! but i have a problem, this guide work perfectly for NEXTCLOUD but when I try to do it to - radarr/obmi etc. it doest work with SSL and only HTTP, doest it's mean my server will be more vulnerable?
Great video, I understand everything but one thing - why will the Let'sEncrypt fail with internal server error when I set the cname/a record in Cloudflare to "proxied"? It works fine when set to DNS only. Don't I loose a lot of security when Cloudflare is set to DNS only?
In my router, am I supposed to forward those ports to the proxy server? Is it actually serving as a relay server, or is it just translating the dns request and then passing the port number to request along? The tutorial is kinda fuzzy on how the routing of the traffic of the services themselves is actually handled.
Amazing walk-thru! I've just started my Unraid journey with much help from illuminated nerd & spaceinvaderone. Now I'll be adding a 3rd source 😉😁🤘I'm slowly migrating from a Win10 box with emby/sonarr/radarr/unifi/etc and I've been using Caddy V2 as the reverse proxy for them. The GUI and ease of use won me over right away with NPM. However my OCD is wondering if this is the same as Swag, minus the gui? 🤔
Thank you for watching and subscribing! Look it depends on preferences, SWAG has some different features such as Docker mods and much flexibility in it's functions. NPM is simpler but does a great job at what it needs to do. Watch our SWAG video too and compare the pair !
How do you have your content empty at 14:12 when setting the www and @ for cloudflare? I'm prompted to use the server IP and unable to proxy it cause it isn't externally facing
thanks for the video! can i also make it like this cloudflare > My bullet proof server -> new server with content So i just want the reverse proxy with the advanced protection is going to redirect to my website. you know what i mean? i hope you can help and tell me how to do :)
hello, I have followed your guide and I really want to thank you for all the efforts you put into this. however, after a couple of months that I had NGINX working, I am now facing a disaster... I am locked out... I can access all the services I added in NGINX but I can't access unraid itself (not even when I am at home and I try to connect locally)... do you have any clue, before I erase everything and I restart from scratch?... should have I made a subdomain for unraid too? should have I changed the default ports of unraid? please help!!!
Could you explain the DNS part of this container ? I hate you didn’t die to a lot of us not being able to validate via HTTP and we have to use DNS verification instead. I watched up to that point and I was disappointed you didn’t show this because I have gotten the whole thing to work all but this part:(
Hoi, is there something else one have to do to reverse proxy for example a webcam stream on another computer, in this case, klipper webcam on a raspberry pi to successfully pass through nginx on unraid?
I currently have 5 of your videos in progress trying to bounce between each one to get one thing set up lol appreciate that you have these videos but I am very lost on the duckdns part, that wasn't explained and no video was referenced like you normally do (hence why I have 5 open at the moment).
Trying to get this working using a cloudflare tunnel... has anyone got this working--- I can point the tunnel to the http port on NPM but not a https port, nor can i get a certificate if I try to force https in NPM, trying to understand why, anyone have a clue I could borrow :)
Thanks for watching! We appreciate ya. Do you like NPM as a reverse proxy? What do you use currently? Let us know below!
Just got it, Your videos of higher level stuff are great, these kinds of things never get videos. I guess because the documentation is so good now days, but as much as I love this stuff I don't have the time to tinker and learn what I don't know, so the info is very useful. The critique was one I received in the past for flight instruction, when you love something you love to share the knowledge, but sometimes we can turn into a firehouse of info :D From my comments you can see it is a hard habit to break, hah
That's okay Ben I appreciate taking the time to leave the feedback. I will take it on board! Thanks for watching
It's good to have another Unraid youtuber out there. I love Spaceinvader's content but having more and varied perspectives is a good thing.
Thank you! Glad to have you 🙂
I may have lost a few details such as:
1) Network Type: Custom @ 5:20 --> How do you set it up? Is it needed? What's the difference to not using it (in terms of settings/upsides/downsides)?
2) What if I don't have a domain and therefore I can't set cloudflare @14:00 ? I just have a DynDNS pointing to my public IP that I will not really give out
Thanks for the video & documentation, finally got it working after moving from SWAG. For anyone having trouble with getting the certificates issued. It could be that in Cloudlfare the proxy is on while the cert hasn't been issued yet. Turning the proxy off allowed me to request a cert after which I could enable cloudflare's proxy once again.
Fantastic videos on this channel! Just changed from SWAG to NPM. Was way easier than the SWAG config and I was up and running in no time flat.
That's the best part of NPM! Thanks for coming and checking out the channel
I've spent probably 10-15 hours trying to get swag and cloudflare working. The reasons you described fit me to a T. I was successful with your guide and I really appreciate it. +1 sub!
Thanks for this video! Got my NPM all setup and configured. Just moved from SWAG and this is way easier!
Heaps easier! Thanks for watching
Thanks, man! I am running nginx on Truenas, so I had to change values to fit my set up. But I got it working in the end. Took two days and having this video up on a second monitor.
Only issue I’m having now is the site will only load in Chrome, not Safari.
This is a life saver. Also, I'd like to highlight, in case with some people, at the end of the process, the domain opens not private page or the router's page, they should check their new domain on some other network to see if it's working or not. They can also connect to a VPN and then check on their network too.
I'm having this issue. When I browse to my domain from outside my network, I get stopped at my router page with an error. How did you fix it?
Thanks a bunch. Thought it wasn't working until I read this and tried using mobile data.
I don't understand how this is so easy. It seems too good to be true. Thanks for the video.
Thanks for the shout out. This was an excellent how to. Very very good!
My pleasure mate, you deserve it. And thank you for the feedback, feel it's getting better
For those getting "internal error" and other issues, I found switching the container from custom to bridge actually fixed my problems, after temporarily disabling the proxy slider on cloudflare. Got SSL from Let's Encrypt working now.
Why was a CNAME DNS entry added for "proxy"? I didn't see that get used anywhere after adding it.
Thanks for the help, even 3 years later still working guide :)
Amazing guide. NPM is amazing. It takes all the guesswork out of setting up a reverse proxy with a nice web-gui.
This was very helpful! I'm looking forward to more guides.
Thanks Scott, appreciate coming back and checking it out. Look forward to putting more out
Thanks so much for posting this. Helped me to no end with getting my nextcloud up and running.
Thank you for letting me move from Swaq to NGINX Proxy Manager.
Thank you sir, a really great video. Made the switch from SWAG so easy. Looking forward to more
You're very welcome Stuart, thanks for watching, appreciate your patronage
Did you remove swag completely, or just stop the app? I have have more trouble than I care to admit. Which seems silly since it looks so simple
Me to. my nextclud was down for like 2 min when i make the switch. so mutch more fun now
Followed this video and DAMN it made my day, everything works perfectly. Love NGINX. Thanks a lot!
You're welcome thank you for watching!
IF YOU ARE GETTING "INTERNAL ERROR"... try disabling "proxied" for your CNAME record in cloudflare, then try again. It should work. At this point, reenable the proxied toggle and everything should work fine.
Thank you for this sir! You saved my day :) (Thanks IBRACORP for the video as well!)
Thanks do Nextcloud next :)
I’d be really interested to know more about the custom bridge mode you set up for the network. It seems you prefer the custom one over just “bridge” so it would be great to know why and how to set that up! :)
It's your lucky day! We actually covered this here: czcams.com/video/7fzBDCI8O2w/video.html
Be sure to check the pinned comment too
Thank you so much for this! Everything is presented so well!
Thank you for the feedback glad you enjoyed it :)
Great video and nice for some updated videos, while space invaders video are very good some are now getting outdated especially if your new to unraid like me thanks again
Hi Nigel, you are correct and technology changes often so staying on the forefront is critical to do justice to our users as well as unRAID who constantly improve their platform.
Thanks for tuning in and hope to share more soon
Does not get a certificate. Internal server error.
Did the video "skip" or did I miss something? At around the 14 minute mark you add a cname of "proxy" but then do nothing else with it. Are we to add that somewhere in nginx?
Did you figure this out?
@@GravyBoatyes but I'm not sure what I did at this point. I think I used the cloud flare tunnel docker.
@@jwhite175 ya I got it too found it from a different video. Had to set A name as domain without the prefix.
I cannot get the DNS and Cloudflare part to work. I have my DNS switched to use CLoudflare now and I get a 552 error when trying to navigate to the cname record I have configured. Now I am sure I am just missing something important.
I have an A record that points to my external IP then a CNAME record pointing to that A record. The rest of the config is the same as the video.
Do I need to have the docker containers I want to forward to also on a private network within UnRaid? Any guidance is appreciated.
Pumba is always a good name!! And a cute warthog
Seriously great video I have done everything and am losing my mind. Each time I try to create a proxy host it fails saying "Internal Error". I have tried so many things and now have a Cloudflare account with a domain that I am not using because I can't figure out these issues. Would it be possible to do a follow up video maybe with some trouble shooting along the way?
Thank you so much for the video, was way easier than setting up swag.
You skipped the part of adding the Cname im stuck on adding it because it requires I add an answer to the Cname which I dont know what to place
The proxy manager shows the proxy as online, but when clicking the link, I get "hmm we're having trouble accessing that site."
Great video, very helpful!
Quick question (noob here):
At 15:55 what do you mean by create your admin account and set it up all the way before accessing remotely?
I like your video, but I wish it was that easy for me. My domain and DNS provider is namecheap, I am adding the subdomain there as an A Record, pointing to my public IP, I also have other A Records pointing to the same IP, but anyway... In NPM I am adding a new host, with my subdomain, when I follow your steps and click save I get the Internal Error message, at that point I cannot follow the suggestions other users have commented here because I am not using cloudfare. Also, I have tried with different network settings, host, bridge and custom with a static IP, nothing works... I have realized that sometimes I get the error "the domain already exist", so I go to hosts and I see the host there but it is not online, when I try to generate the ssl again and click save, the internal error comes back.
Now, I successfully generated a SSL cert for my root domain, however, when I try to open Home Assistant from NPM (yes I am using my root domain with home assistant), it doesn't load the website, I have to manually add the home assistant port at the end (5123), however that works only in my PC, if I load the Home Assistant Companion from my tablet using my root domain, it doesnt work. Home Assistant works when I redirect port 443 in my router to port 5123 in my Home Assistant Pi.
So at then I dont know what to do, I basically deleted the container for NPM, I went back and port forward my home assistant as it used to be, I cant use NPM for another application as I wanted (deemix) and I am in square one... I see everybody uses cloudfare and all videos or guides are made for that, but my case is different, I have had my domain for years with namecheap, I have used letsencrypt in VMs using the DNS method with namecheap without any issues, but I cant understand why is it so complicated with NPM. Any help is appreciated. Thanks.
YOU make this shit fun for me. ty. keep up these no crap bullshis tutorials. i love them.
You're a legend mate thank you for the feedback I really appreciate it ✌️
Love the server name!! 😂
Flawless. Amazing.
Got it working across a few subdomains/containers really great...
But for some reason I cant get an SSL for Jellyfin ("Internal Error" in NGINX when I try and create the proxy host) and can't get it to work without it either... Hmmm... Gonna have to keep digging.
Still great videos. Really appreciate the help with unraid.
Thank you ♥️
Need elaboration on setting up access list info.
How to setup this fir homeassistant on another machine on another vlan in network.
You can do without the cloudflare, you just have to make a sub-sub-domain point to the sub-domain of your duck dns. (Id give an example but my comments been deleted 2 times already, probably because of the examples i gave) that would bw nice to have included if you ever do an updated version of this, not that it it out of date or anything, i just used it to get my setup running in about 30 min...
The next challenge is how to go about setting this up using non-standard ports!!
DNS TXT records is one way but I have not figured out how to do this with the UnRaid container
Use the CloudFlare tunnel and avoid ports all together (we did a video on it)
Otherwise 80 443 can be forwarded to a different port as long as that is what you set in the container for NPM
I LOVE YOU. This is exactly what I needed.
I love you too xx
I was with you right up until the SSL cert part. I click [Save], it thinks a moment, then I get a generic "Internal Error" banner in red across the top of the dialog. Any idea how to proceed?
did you figure out the problem, i got the same thing
@@isakolsen679 nope. I just gave up. lol
i have the same problem :(
If you're using Let's Encrypt then often this means LetsEncrypt is unable to verify your domain so it fails.
We prefer using Cloudlfare origin certificates for this.
Also, worth checking the logs when that error appears to help you figure out why.
Otherwise, the method is definitely still working.
What if you dont have a domain and just want to access your dockers remotely?
IMPORTANT NOTE FOR FELLOW AUSSIES: One potential issue is your ISP blocking ports 443 and 80. Im with Aussie BB and they do indeed block them, a simple call to support gets them unblocked (also get out of cgnat as well if you haven't already). Took me 3 days of hair pulling to figure that out.
Cheers mate. You can also use CloudFlare tunnels for this purpose and to avoid opening ports altogether. Video on it on our channel
doesnt this open up your unraid server to attacks?
Brilliant - no fluff, just do it. got a subscriber.
That's how we do it here Abz. Thanks for subscribing!
I checked - everything is clean
Accessing my subdomain works perfectly! However, when I attempt to access the domain itself - I get SSL handshake failed Error code 525 message. I'm guessing that's due to not having a web server running and hosting a site for the domain?
Hi Ibra! I really like your videos, they're great and helped me so much with my unraid server.
One question here: I've been using letsencrypt, then swap and since I watched this video I've been trying NPM with no issues on hosting my docker services but, I've also configured some websites on swap pointing each one to a specific folder, tried to do it with NPM with no luck. What could I be missing?
Thanks in advance mate!
im forwarding the ports as you shown (except for 18443, i had to put it as 1443 bc my router couldn’t do that with 443, saying not allowed) and my domain still links to the unraid web gui. I also did the A record of @ leading to my home IP and another A record of www leads to the server IP
I've been thinking about setting up something like this or haproxy on pfsense for a while now, not cause i really want to, but I think I'm going to have to. For years I've just had separate physical network coming off pfsense, nic switch etc. And 1 fqdn with everything pointing directly here, a records, mx, etc, well not my own ns servers, but away. Its worked great. I figured isp would get mad about the whole mx thing and either block or send me a nastly letter or something, but after a couple of years they never have. But i'm really light on 25 so idk, but back to my point: Now I have a 2nd fqdn pointing here as well and there is where problems began and where I find my myself scratching my head as to how to proceed. Another subnet won't help anything with that i don't think. I'm a little out of touch i guess. Oh, and 1 or the domains i have uses cloudflare ns. Your cloudflare vid has kind of changed my mind about how i feel about them. I probably commented there.
Fukken thanks, i was struggling to learn how to configure NGINX reverse proxy and Let's Encrypt, now i won't have to bother configuring HTTPS and certificate on everything i install.
Exactly right! Welcome aboard
After installing NPM I had to wait about 10 minutes before I could login with the default credentials. Not sure why but it kept giving me a bad user error (user not found, or something to that effect). I couldn't find that documented anywhere, but after about 10 minutes I could get in.
Also, I switched from swag container, and got errors when adding the proxy hosts. I switched to CF origin server cert and it took care of the issue. I think LE in NPM was conflicting somehow with certs I already had registered in swag
Yeah could be due to using similar details in the LE certificates which might return a failure as the certificates already exist elsewhere.
Using CloudFlare is the best way in my opinion anyway, great job getting it going
Really clean and well made guide. thanks alot!
Thanks Sammi! Really appreciate it
So ive done all of these steps, and I have used overseerr as well. When i load overseerr it says you are offline. and there is abutton to press that says reload. No matter what I do it just comes back to that screen.
Why would you port forward the entire unraid server and not just that single docker container? Shouldn't it show up as its own host on your network that you port forward?
We don't forward to the 'whole unraid server'. We forward to the ip and port of the reverse proxy. In this case, the IP is the server, and port is NPM.
Alternatively, you can set up separate IP for the container or use a VM. Or use a tunnel, which is how we operate nowadays here and don't open any ports at all.
Hey mate, good to hear an aussie accent on these tutorials. Hoping you can help if you have time. I have set up successfully with sonnarr and radarr. Seems to have no problem with other unraid dockers, but going to docker or web server on another VM is an issue. Currently having issues with a self hosted HUDU install. Works fine by direct IP or port forwarded to direct IP. Soon as I port forward to NPM I get redirect issues. Hudu has SSL (letsencrupt) built in so I have tried turning it off in NPM and various other configs that don't seem to work.
More info: Using Bridge network. If I select SSL-none I get http2 protocol error, and if I select SSL and ony check HTTP2 support I get too many redirects. Have also played with site config files and 'custom locations'. I spent weeks (maybe more) trying to build a reverse proxy server a couple of years ago and gave up. Really would like to get this working so I can host more than one thing. Any help is greatly appreciated. Even pointing me towards another vid or some conscise docs.
Did you ever find a solution to this?
@@notoryous2 Yes mate. Turns out I had completely missed a couple of settings. Scheme - HTTPS instead of HTTP and make sure the port is also correct... not always 80 or 443.
Hey I know this is an old vid but could you do a DDWRT video? Like what the best setting a home lab environment and such, greatly appreciate your contents!
Thanks for the video, really clear explanations :)
My pleasure thank you for watching and subscribing :)
I'd love to see a video about the move from spaceinvader one's let's encrypt (swag)/nginx reverse proxy setup to your setup and show us the benefits.. I think most of us have this setup.
Good point mate I think that's a good approach
It works, but if I want to have another 443 on another internal address? it doesn't work anymore! how do I solve this problem?
Got pretty baffled by this because I previously followed a SpaceInvader tutorial on using DDNS with Cloudflare with my own domain, (resulting in a Cloudflare docker on unraid) so all the duckdns stuff is irrelevant to me. Seems odd that you're using Cloudflare for DNS management but not for DDNS - or am I missing something ?
Some gentle constructive criticism, as I do really appreciate your videos: - you have a bit of a habit of saying that something is 'super simple'. In fairness, when you use this comment after a slow paced, step by step explanation, then - because you've just demystified the subject - it's fair enough.
However you do also use the phrase after sections that are anything but simple, and I suspect they only strike you as straightforward because you have a top down, 'big picture' perspective most of us watching these videos don't have. I appreciate that it must be very difficult - especially since it's clear that some of Space Invader's videos that are only a couple of years old are already well out of date compared to current best practice. Must feel like trying to juggle a dozen balls at once, so I really do appreciate your efforts, just please bear in mind that your 'simple' isn't necessarily so for some of your thicker viewers i.e. me!
Hi Julian, thank you for your feedback. I appreciate you taking the time to write it up.
In regards to the DDNS I actually made a seperate video for that subject which is why it's not mentioned here.
As for the phrase I use I can see where you're coming from and I think I say it as a form of encouragement while teaching. I'll see if I can be more mindful about it.
@@IBRACORP Thanks for replying - and you're right, it can be and often is encouraging. Cheers
Thanks for the video. It's pronounced "Engine X" I believe though.
Thank you, yeah I've realised since making the last couple videos. Excuse me on that one
@@IBRACORP No worries mate, I def pronounce stuff wrong all the time and just appreciate the courtesy when someone corrects me in a gentle manner, haha.
@@JohnnieTech2 much appreciated. It was a lot more gentle than the last way I was told haha. Live and learn!
I have a question, is my homenetwork exposed to the internet with this stuff? or am I safe and no open ports to the wan?
this was all working great for me until, for some reason, certbot failed to renew the certs "Failed to renew certificate npm-1 with error: Some challenges have failed." Manually clicking the Renew Cert button in NPM also fails. Is it a port forwarding issue? Ive read that you need to have port 80 staying at port 80 elsewhere on the web. I think for this I had port 80 forwarded to 1880 for NPM in my pfsense.
it says I cant make it to the host for some reason. Brower working and cloudflare is working
There's a video on In The setup's channel about free DAWs, alternatives, and even if you can't afford it you can "get" it. Not quite an
How can I point/reverse proxy to apps/dockers only to LAN. I don't care about cloudflare/ssl. I want to keep everything in house.
hey so its not entirely this subject but i have tried running pterocdactyl with nginx proxy manager by putting nginx cli on another port and redirecting via nginx proxy manager but im having a bit of issues getting error of too many redirects and cannot login like i opened a new icognito mode tab and tried to login with multiple emails doesnt work
A great video and it helped guide me off of troubleshooting SWAG. One question relates to managing nextcloud. The reverse proxy works with nextcloud (ie: I can access it through my subdomain), but the nextcloud container gives me a bunch of security errors (The "Strict-Transport-Security" HTTP header is not set to at least "15552000" seconds, or Your web server is not properly set up to resolve "/.well-known/webfinger".) All of the help documentation assumes .conf files can be manipulated (like in SWAG). How can I do something like this in NPM?
I install it, it says it installs fine... but it wont take the default credentials.... can't sign in... not sure what i'm doing wrong.
Thanks for the video. But why did we use "request a new ssl certificate" vs choosing the custom one we added to nginx? I wanna be able to understand.
I am getting the default landing page with the external IP. but having 522 cloudflare issues when trying to access with the domain name.
me too. on and off issue. not sure how to fix
@@ViscountJimmy yeah regardless of what app I try, I can access it from the local IP, but when I press the source in NPM it times out with a 522 error.
Please join our Discord if you need additional help
@@ViscountJimmy Hi James, thanks to the guys in the Discord I was able to fix it, let me know if you need help
@@IBRACORP the guys in the discord were amazing, so much support by the community, it was incredible to see
This is well explained but I have a question what happens if your ISP have blocked most of your ports as mine has would this still work ?
Thanks for the info. I have Google Fiber and I think it's just not accessible on port 80/443 externally so I wasn't able to get this setup.
Try our video on CloudFlare Tunnels to bypass 80/443 blocks and close open ports altogether
Thanks for the video it helped a lot! The only issue Im having is with enabling "Force SSL" option. If that is enabled I am not able to access the website. If it is disabled I have no issues. I am using CloudFlare and have HSTS and always use HTTPS enabled. Any thoughts on how I can get Force SSL working?
Love the video, I have almost the same setup as you here but am having problems when I try and do the certificate. I get an api communication error, do I need to do something in Cloudflare for the certificate request to work properly? I think the port forwarding and stuff is OK because if I don't use ssl I can access the site properly, but that's not ideal obviously.
Do I need to set the domain in Cloudflare from "Flexible" ssl settings to "Full" or something else in Cloudflare? I think the problem I am having is to do with the certificate not being issued properly.
wanting. The idea was to get a midi keyboard and use the softs programd into soft soft, however, if I can't find tNice tutorials core soft, I
I have a quick question, when i added overseer to this, it works on an external whise and internal, however ive noticed that the loading time for the login is very slow. I was wondering if this is because in docker i have my plex media server on the bridge network?
I tried adding the plex media server to my custom docker network, which improved the login speed for overseer, however connecting to the media server externally isn't able to be done directly for playing and uses the dreaded plex relay service, is there a step im missing on port forwarding or something that i need to do?
Fantastic video @IBRACORP can you make video about connecting NGINX with goaccess.
I'm using my br0 network, is there any way to connect the br0 network to host?
This is a problem when I'm using HASSIO supervisor that runs on host
Hi Anyone else having problems using VNC to VM's when using NGINX
starts at 5:16
hey great video! but i have a problem, this guide work perfectly for NEXTCLOUD but when I try to do it to - radarr/obmi etc. it doest work with SSL and only HTTP, doest it's mean my server will be more vulnerable?
Great video, I understand everything but one thing - why will the Let'sEncrypt fail with internal server error when I set the cname/a record in Cloudflare to "proxied"? It works fine when set to DNS only. Don't I loose a lot of security when Cloudflare is set to DNS only?
Npm keeps on throwing internal error.
In my router, am I supposed to forward those ports to the proxy server? Is it actually serving as a relay server, or is it just translating the dns request and then passing the port number to request along? The tutorial is kinda fuzzy on how the routing of the traffic of the services themselves is actually handled.
Amazing walk-thru!
I've just started my Unraid journey with much help from illuminated nerd & spaceinvaderone. Now I'll be adding a 3rd source 😉😁🤘I'm slowly migrating from a Win10 box with emby/sonarr/radarr/unifi/etc and I've been using Caddy V2 as the reverse proxy for them.
The GUI and ease of use won me over right away with NPM. However my OCD is wondering if this is the same as Swag, minus the gui? 🤔
Thank you for watching and subscribing! Look it depends on preferences, SWAG has some different features such as Docker mods and much flexibility in it's functions. NPM is simpler but does a great job at what it needs to do.
Watch our SWAG video too and compare the pair !
@@IBRACORP awesome thanks! Will def check out the your Swag vid. 🤔 NPM being simpler is a good thing. My caddyfile is the shortest ever. 😆
How do you have your content empty at 14:12 when setting the www and @ for cloudflare? I'm prompted to use the server IP and unable to proxy it cause it isn't externally facing
thanks for the video!
can i also make it like this
cloudflare > My bullet proof server -> new server with content
So i just want the reverse proxy with the advanced protection is going to redirect to my website. you know what i mean?
i hope you can help and tell me how to do :)
hello, I have followed your guide and I really want to thank you for all the efforts you put into this. however, after a couple of months that I had NGINX working, I am now facing a disaster... I am locked out... I can access all the services I added in NGINX but I can't access unraid itself (not even when I am at home and I try to connect locally)... do you have any clue, before I erase everything and I restart from scratch?... should have I made a subdomain for unraid too? should have I changed the default ports of unraid? please help!!!
thanks! really useful!
You're welcome! Thanks for watching
WHen saving proxy host. I get an internal error....
It may be worth starting again fresh and double-checking all the steps. Have you checked the container logs?
Could you explain the DNS part of this container ? I hate you didn’t die to a lot of us not being able to validate via HTTP and we have to use DNS verification instead. I watched up to that point and I was disappointed you didn’t show this because I have gotten the whole thing to work all but this part:(
Hoi, is there something else one have to do to reverse proxy for example a webcam stream on another computer, in this case, klipper webcam on a raspberry pi to successfully pass through nginx on unraid?
I currently have 5 of your videos in progress trying to bounce between each one to get one thing set up lol appreciate that you have these videos but I am very lost on the duckdns part, that wasn't explained and no video was referenced like you normally do (hence why I have 5 open at the moment).
Have you looked into purchasing your own domain?
fantastic video!
Trying to get this working using a cloudflare tunnel... has anyone got this working--- I can point the tunnel to the http port on NPM but not a https port, nor can i get a certificate if I try to force https in NPM, trying to understand why, anyone have a clue I could borrow :)
Can I import my softs into soft soft and process without using a mic