[SOLVED] No noVNC with Proxy: exit code 4

[papanito]

I have configured my proxmox environment to be accessed via a remot proxy so instead mydomain.com:8006 I can access it via proxmox.mydomain.com. Hoever, this does not work for noVNC. After updating the certificates according to https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x_and_newer) this also does not work for the console, but I rather get this error

Virtual Environment 5.1-43
Virtual Machine 103 (win10-dev) on node 'proxmox'
Logs
()
timed out waiting for client
TASK ERROR: command '/usr/bin/termproxy 5900 --path /vms/103 --perm VM.Console -- /usr/sbin/qm terminal 103 -escape 0' failed: exit code 4

My apache configuration - the ssl certificate is issues by letsencrypt:

<IfModule mod_ssl.c>
   <VirtualHost *:443>
      ServerName proxmox.mydomain.com
      ServerAdmin webmaster@mydomain.com
      ErrorLog ${APACHE_LOG_DIR}/proxmox_error.log
      CustomLog ${APACHE_LOG_DIR}/proxmox_access.log combined
      SSLEngine on
      SSLProxyEngine on
      SSLProxyVerify none
      SSLProxyCheckPeerCN off
      SSLProxyCheckPeerName off
      SSLProxyCheckPeerExpire off
      SSLCertificateFile      /etc/letsencrypt/live/mydomain.com/fullchain.pem
      SSLCertificateKeyFile /etc/letsencrypt/live/mydomain.com/privkey.pem

      ProxyRequests off
      ProxyPreserveHost on
      RequestHeader unset Accept-Encoding
  
      LoadModule proxy_module modules/mod_proxy.so
      LoadModule proxy_http_module modules/mod_proxy_http.so

       <Directory />
            AllowOverride none
            Require all denied
       </Directory>

       <Location />
            ProxyPass https://mydomain.com:8006/
            ProxyPassReverse https://mydomain.com:8006/
        </Location>

        <IfModule mod_headers.c>
             Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
        </IfModule>
   </VirtualHost>
</IfModule>

However, when I access my proxmox via https://mydomain.com:8006 I can access noVNC and terminal are working fine. So somehow my proxy is not configured correctly. Any idea what is missing/wrong?

 

[dcsapak]

we use a websocket for the terminal/novnc connection, so you also have to configure your proxy to proxy the websocket connections (e.g. the upgrade header must be set etc.)

 

[papanito]

I actually found it easier to switch to nginx and use the configuration as explained here: https://pve.proxmox.com/wiki/Web_Interface_Via_Nginx_Proxy. Works like a charm now

 

[ErazorVIP]

I actually found it easier to switch to nginx and use the configuration as explained here: https://pve.proxmox.com/wiki/Web_Interface_Via_Nginx_Proxy. Works like a charm now

Thats works very well