NGINX: Unable to access proxmox server

[ckaprsx]

Setup:
Proxmox v8 - 192.168.1.200
Ubuntu on VM - 192.168.1.199
NGINX on Docker in Ubuntu VM

I've tried mapping Proxmox v8 to NGINX proxy host, but unable to access the same via the hostname mapped. It always returns connection refused.
Is there any configuration that needs to done in order map the .200 ip to proxmox which can be accessed via domain instead of entering IP and port.

 

[0zw00d]

on my Nginx-Proxy-Manager I have the following configured:



it work's without problems.

The only thing I could say is, that it would be a bad idea to expose pve like that, no matter if it's an dedicated server or private.
NGINX has too many security issues and the developers aren't so fast to fix the Vulnerabilities.

I mean it's your decision, but I only use it if I'm on the outside and never let it Enabled.

 

[ckaprsx]

on my Nginx-Proxy-Manager I have the following configured:

View attachment 55929View attachment 55928

it work's without problems.

The only thing I could say is, that it would be a bad idea to expose pve like that, no matter if it's an dedicated server or private.
NGINX has too many security issues and the developers aren't so fast to fix the Vulnerabilities.

I mean it's your decision, but I only use it if I'm on the outside and never let it Enabled.

Thank you for suggesting about the vulnerabilities. I'm planning to toggle when necessary only.
I've also configured the same was as yours. I've checked ample of videos/tuts online and everywhere it works the same.

I guess the catch here is that PVE (192.168.1.200) has a VM which has Docker installed under Ubuntu configured to IP address 192.168.1.199 which may the cause? Still trying to figure out the answer.
The only way right now I'm able to connect is by adding additional port forwarding rule specifically for PVE and one for NGINX in the router.
Any thoughts on this?

 

[0zw00d]

can you make a simple Netplan how your network is configured?

Like this:

Your proxmox host ip address —> vm or lxc ip address—> settings on your router

Also you need definitely a domain which you own.

Without that it’s hard (not impossible) to configure it.
Because you need a static ip public ip address and also a certificate provider like let’s encrypt.

I need to understand how you build everything to help you out.

 

[ckaprsx]

can you make a simple Netplan how your network is configured?

Like this:

Your proxmox host ip address —> vm or lxc ip address—> settings on your router

Also you need definitely a domain which you own.

Without that it’s hard (not impossible) to configure it.
Because you need a static ip public ip address and also a certificate provider like let’s encrypt.

I need to understand how you build everything to help you out.

Looks like I've the pre-requisites in place:
1. Proxmox host IP address: 192.168.1.200
2. VM / LXC IP Address: 192.168.1.199 (NGINX installed on Docker on this IP)
3. Access to router: Yes. Port forwarding done separately for both.
4. Own a domain: Yes
5. Static IP Address: Yes
6. Let's Encrypt: via NGINX

 

[0zw00d]

Ok I see your problem.
Let me explain:

For to get nginx working, it’s necessary to use a dedicated server.

Why?

What you explain is exactly the problem I had, it’s not possible for you ( I think) to expose the ports necessary for nginx.

It uses port 80 and 443 for http / https.
But this times the most ISPs only uses this for the connection of your gateway.

This was my problem.

To solve this I needed to set up a dedicated server which acts as a vpn and also my nginx proxy manager.

Since that I never had any issues.

In most cases if you try to expose a host it doesn’t get the right Ports forwarded.

So my suggestion is to create a dedicated server on linode or hetzner (if you search you can get 100$ linode cash for free )

 

[ckaprsx]

Ok I see your problem.
Let me explain:

For to get nginx working, it’s necessary to use a dedicated server.

Why?

What you explain is exactly the problem I had, it’s not possible for you ( I think) to expose the ports necessary for nginx.

It uses port 80 and 443 for http / https.
But this times the most ISPs only uses this for the connection of your gateway.

This was my problem.

To solve this I needed to set up a dedicated server which acts as a vpn and also my nginx proxy manager.

Since that I never had any issues.

In most cases if you try to expose a host it doesn’t get the right Ports forwarded.

So my suggestion is to create a dedicated server on linode or hetzner (if you search you can get 100$ linode cash for free )

That's what even I had in my notes, that it won't be possible.
I'll rather remove the PVE from NGINX and use IP only as it would be limited access to few people.

Thanks for the support. Cheers for coffee!