pfsense web secure access - not working

caymann

I am using port 10443 for the web access
So https://192.168.1.1:10443 work fine and i can access pfsense
But https://pfsense.jondoe.com doesnot work

I am using letsencrypt wildcard certificate for *.jondoe.com with DNS validation
This works well for web services exposed to the internet

But I only want to access https://pfsense.jondoe.com from within LAN
Not interested in exposing it to the internet

I will use this access within LAN or sometimes when i VPN into network

I also use HAproxy
Backend, i created pfsense.jondoe.com as 192.168.1.1, port 10443 and named it pfsense
I chose no Encrypt and no SSL check as it will be handled by frontend

Frontend, i am using listen address as LAN address, port 443, SSL offloading checked
Access control list is (pfsense.jondoe.com) and actions (use backend = pfsense)
Certificate is wildcard from letsencrypt

But when i try: https://pfsense.jondoe.com, i get connection is not secure and this page is not working.

What am i missing here?
thanks
jim

chpalmer

@caymann

Does "https://pfsense.jondoe.com:10443" work? You need a firewall rule on your WAN interface for that..

caymann

@chpalmer no that doesn't work

chpalmer

@caymann

Are you trying to reach it from an outside source or from your LAN? You probably need NAT reflection turned on if from your LAN..