Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache)

[sawgood]

Hi:

Using Proxmox 3.0 (different setup from 1.8/1.9) ... how can I accomplish this goal:

MOVE the GUI to Proxmox 3.0 from being open/available at:

https://public-ip:8006
to only being available at
https://127.0.0.1:8006

I want to require a SSH login to the box first (with cert) (done) , and then only could one get to the GUI at https://127.0.0.1:8006.

I had this done with Apache, but with pveproxy ... it is not as easy.
I could not find this documented ... any tips would be appreciated ...

Finally, is there a good book or .PDF on Proxmox (covering 1.8 through this new version 3.0)?

Thanks again in advance.

 

[ebiss]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

ugly hack.....

1. backup /usr/bin/pveproxy
2. edit pveproxy
change
$daemon = PVE::APIDaemon->new(
port => 8006,
TO
$daemon = PVE::APIDaemon->new(
host => "127.0.0.1",
port => 8006,

3. service pveproxy restart

Maybe dietmar can implement this feature in future with config file

 

[dietmar]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Maybe dietmar can implement this feature in future with config file

Please can you file a bug at bugzilla.proxmox.com?

 

[ebiss]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Please can you file a bug at bugzilla.proxmox.com?

OK. have filed a feature request in bugzilla.
https://bugzilla.proxmox.com/show_bug.cgi?id=429

Just notes someone have file a same request:
https://bugzilla.proxmox.com/show_bug.cgi?id=402

 

[sawgood]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Thank you! Worked as your hack described ... getting rid of the rest 'left' on the outside is something I'll follow though with bug updates, etc.
Nice to have gotten such a fast work around / reply.
Thanks again.

 

[sawgood]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Hey (update) ...

With the changes made, yes Proxmox 3.0 is 'behind' the WAN (so to speak) using https://127.0.0.1:8006, but what I've discovered is that I cannot console to a KVM box anymore.
If I put the box back to https://public-IP:8006, console works as it should.
Something else might need to be put in the pveproxy file and/or another helpful hint would be appreciated.

 

[ebiss]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Console seem need tunnel 8006 and 5900 5901 ...

 

[sawgood]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Hey eBliss

Any documentation on where in pveproxy one can 'adjust' :5900 like :8006 was done, or from you screen shot (it is just puTTY that needs the entries)?

 

[sawgood]

Re: Proxmox 3.0: changing https://public-ip:8006 to https://127.0.0.1:8006 (no apache

Hey eBliss:

Got it ... thanks for the tips ... I have :8006 working has a 'hack' on 127.0.0.1:8006 (the public IP still has a web landing page at the public IP though) = I'm ok with that.
And ... using your screen shot, I got puTTY working with console access working at :5900.

Thanks again.