Nginx Proxy Manager is able to connect to my domains on the internet, but I cannot reverse proxy into VMs on the same bridge that tracepath 1 hop away

CyborgRider

New Member
Feb 25, 2024
5
1
3
I'm quite unsure of what is happening. I've been struggling with this for the last two weeks.
So I've installed proxmox on my home machines. My gaming PC has a GPU passthrough working well enough, and my Windows VM feels like a natural PC with all my USB ports forwarded and everything. I even have a PCI NIC that I passed through to the VM. This leaves the slower ethernet port as my proxmox bridge port.
I do have a cluster set up. I have two more machines that are each smaller than the gaming machine. They each host a few of my VM/CTs including a CT for Nginx Proxy Manager.
I am able to access Nginx Proxy Manager from the internet, as I get the congratulations message on launch of my website address that is not currently directed. I have previously had the same servers setup on my network, and know what the NPM config should look like to pass traffic through on a standard network, however when pasting the same location data in the advanced config, exactly how I was using before but with the IP updated for the VM I can currently access in my browser(From outside the bridge on my windows VM) without issue. I have been using the default vmbr0 for of my networks, as I only have one port on most of my servers. No VLAN, No VNets, no Zones.
I ran tracepath from the CT with NPM pointed at the ip of the server that again, can load in my browser, and it connects in one hop. I run tracert from windows and it also gets 1 hop to the finish line, but somehow, it's able to function on the IP, and not the Domain name. My Domain is going through a cloudflare proxy, so I've been able to access the site url as if I was outside my network, however I have tested the issue persists even if I am outside the network entirely with the proxy disabled. The issue lies somewhere between NPM in a CT in proxmox, and the other proxmox CT and VMs. The most obvious thing in between these points that wasn't there before is Proxmox, but that's not going anywhere any time soon.
What it seems to me is that, the bridge is having some kind of problem with communication even when the firewall is disabled.
Currently, all of the firewalls are turned off on the datacenter, the nodes, and the VM/CTs in question, as I feel I can figure firewalls out much easier once I've finished this issue and have a working baseline to lean back on.
Thanks in advance for any help you can give, I'm new to proxmox with the VMWare Exodus and I've been working on this all day today, non-stop until 4am. I'm going to head to bed for a little while and then check back in to see if anyone has any ideas, or if simply writing it all out and taking a nap will trigger something in my brain.
edit: the 4 hour nap did not trigger anything in the brain. SOS.
 
Last edited:
Hi, any luck with this? I also have NPM running on a different machine (Synology NAS) and have no problem making containers public except I can’t seem to get NPM to route to the ubuntu/docker portainer VM’s IP address + portainer service port.
 
Hi, any luck with this? I also have NPM running on a different machine (Synology NAS) and have no problem making containers public except I can’t seem to get NPM to route to the ubuntu/docker portainer VM’s IP address + portainer service port.
Yes! I figured it out with this: https://github.com/ej52/proxmox-scripts/tree/main/apps/nginx-proxy-manager
This was linked from the npm forum under proxmox scripts, if you want to double check the source. I had to start over on the install, but once it's installed, it really does work. Really well. I use it for all four of my websites today!
 
  • Like
Reactions: mikebel3
Yes! I figured it out with this: https://github.com/ej52/proxmox-scripts/tree/main/apps/nginx-proxy-manager
This was linked from the npm forum under proxmox scripts, if you want to double check the source. I had to start over on the install, but once it's installed, it really does work. Really well. I use it for all four of my websites today!

Thank you. Sounds like I would need to start over and install NPM in a Proxmox LXC. Do you know if there is an option to continue using NPM in Synology?
 
Thank you. Sounds like I would need to start over and install NPM in a Proxmox LXC. Do you know if there is an option to continue using NPM in Synology?
From what i understand of the proxmox setup, this was the only way to get it working. I will say though, it's fairly easy to copy the config files for npm which brings over your whole setup almost as you have it now. Might have some issue with the SSL, but you should be able to renew it easily enough once the system loads your old configs. I did have a bunch setup on my old npm, and I did have to rebuild mine when I moved anyways just because my move to proxmox was spurred by hardware failure. I moved to a cluster for that reason, and I would suggest using the proxmox scripts for that reason entirely. Clusters. With the lxc, the npm can migrate between nodes, change the physical network ports that it's using, and can keep the servers connectable the second it's booted back up after migration. If you need help with transferring files, I can do some research on Synology devices running proxmox to see if I can find the location of the files you'd want to copy, but you should be able to basically just nano them open and copy the contents to a matching file on the new machine in the new npm location. I do believe the scripts install it slightly different than the normal method as well. I forget the folder structure for it.
 
From what i understand of the proxmox setup, this was the only way to get it working. I will say though, it's fairly easy to copy the config files for npm which brings over your whole setup almost as you have it now. Might have some issue with the SSL, but you should be able to renew it easily enough once the system loads your old configs. I did have a bunch setup on my old npm, and I did have to rebuild mine when I moved anyways just because my move to proxmox was spurred by hardware failure. I moved to a cluster for that reason, and I would suggest using the proxmox scripts for that reason entirely. Clusters. With the lxc, the npm can migrate between nodes, change the physical network ports that it's using, and can keep the servers connectable the second it's booted back up after migration. If you need help with transferring files, I can do some research on Synology devices running proxmox to see if I can find the location of the files you'd want to copy, but you should be able to basically just nano them open and copy the contents to a matching file on the new machine in the new npm location. I do believe the scripts install it slightly different than the normal method as well. I forget the folder structure for it.

Thank you. I did a bit more digging and was able to find that unlike most other services, proxmox uses https so changing the NPM scheme to https for proxmox and the LXC container fixed my issue! So glad! Thanks for your help, it helped me dig in the right direction.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!