Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAProxy - can't get a site to work

    Scheduled Pinned Locked Moved Cache/Proxy
    18 Posts 2 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • CreationGuyC
      CreationGuy @viragomann
      last edited by

      @viragomann said in HAProxy - can't get a site to work:

      /searxng/%[path]

      Screenshot 2024-04-23 at 15-28-56 TheWall.jrfam.net - Services HAProxy Backend.png
      Screenshot 2024-04-23 at 15-29-14 TheWall.jrfam.net - Services HAProxy Backend Edit.png

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @CreationGuy
        last edited by

        @CreationGuy
        You have to enter the string at "fmt".

        CreationGuyC 1 Reply Last reply Reply Quote 0
        • CreationGuyC
          CreationGuy @viragomann
          last edited by CreationGuy

          @viragomann I fixed that, but in Firefox I get this:

          
          
          Secure Connection Failed
          
          An error occurred during a connection to searx.domain.net. SSL received a record that exceeded the maximum permissible length.
          
          Error code: SSL_ERROR_RX_RECORD_TOO_LONG
          
              The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
              Please contact the website owners to inform them of this problem.
          
          V 1 Reply Last reply Reply Quote 0
          • V
            viragomann @CreationGuy
            last edited by

            @CreationGuy
            Yes, but that's a different problem with SSL.

            In the frontend you have to uncheck SSL offloading for port 80.

            If you want to access the server via SSL you need to configure the frontend with port 443 + SSL offloading and assign a proper certificate to it.

            CreationGuyC 1 Reply Last reply Reply Quote 0
            • CreationGuyC
              CreationGuy @viragomann
              last edited by

              @viragomann I do, I have other services such as portainer, FileBrowser (Docker that has no SSL so HAProxy assigns on via Cloud Flare). The difference here is searx is on a totally separate server than the one running portainer.

              V 1 Reply Last reply Reply Quote 0
              • V
                viragomann @CreationGuy
                last edited by

                @CreationGuy

                246bc42e-d4a5-4108-921d-90b8a1d8025c-grafik.png

                But port 80 + SSL offloading will not work in the browser as long as you don't state the port like https://searx.mydomain.net:80

                CreationGuyC 1 Reply Last reply Reply Quote 0
                • CreationGuyC
                  CreationGuy @viragomann
                  last edited by

                  @viragomann I guess I don't know how to explain it.

                  SearxNG installs in a folder /searxng so when you go to to apache searver, in my case, http://10.20.20.8, I get the apache hello page, if I go to http://10.20.20.8/searxng I get the searxng engine.

                  I want to use HA proxy to just use my cert when going to https://searx.mydomain.net

                  V 1 Reply Last reply Reply Quote 0
                  • V
                    viragomann @CreationGuy
                    last edited by

                    @CreationGuy said in HAProxy - can't get a site to work:

                    I want to use HA proxy to just use my cert when going to https://searx.mydomain.net

                    So when your enter this into your browser (with https in front as scheme), the browser to the the port 443!
                    Thus the frontend has to listen on port 443 and provide a proper SSL certificate, since the browser is expecting it.

                    No matter which port your backend server is listening on. This might be 80 or whatever and has to be stated in the backend settings.

                    CreationGuyC 1 Reply Last reply Reply Quote 0
                    • CreationGuyC
                      CreationGuy @viragomann
                      last edited by

                      @viragomann I belive I understand that but isn't that what HAProxy is doing for my other websites/services?
                      Why won't it work for this one service?
                      DNS Host Overrides:
                      DNS Host Override.jpg
                      front.jpg
                      Screenshot 2024-04-23 at 17-18-24 TheWall.jrfam.net - Services HAProxy Backend Edit.png

                      CreationGuyC 1 Reply Last reply Reply Quote 0
                      • CreationGuyC
                        CreationGuy @CreationGuy
                        last edited by

                        Thank you for your help, after a reboot of the router, it is now working.... thank you again!

                        V 1 Reply Last reply Reply Quote 0
                        • V
                          viragomann @CreationGuy
                          last edited by

                          @CreationGuy said in HAProxy - can't get a site to work:

                          after a reboot of the router, it is now working....

                          Of pfSense?
                          Strange. HAproxy should be restarted on each configuration change anyway.

                          CreationGuyC 1 Reply Last reply Reply Quote 0
                          • CreationGuyC
                            CreationGuy @viragomann
                            last edited by

                            @viragomann Yes, not sure why that made a difference but it's working.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.