Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HAProxy - can't get a site to work

    Scheduled Pinned Locked Moved Cache/Proxy
    18 Posts 2 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      viragomann @CreationGuy
      last edited by

      @CreationGuy
      You have to enter the string at "fmt".

      CreationGuyC 1 Reply Last reply Reply Quote 0
      • CreationGuyC
        CreationGuy @viragomann
        last edited by CreationGuy

        @viragomann I fixed that, but in Firefox I get this:

        
        
        Secure Connection Failed
        
        An error occurred during a connection to searx.domain.net. SSL received a record that exceeded the maximum permissible length.
        
        Error code: SSL_ERROR_RX_RECORD_TOO_LONG
        
            The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
            Please contact the website owners to inform them of this problem.
        
        V 1 Reply Last reply Reply Quote 0
        • V
          viragomann @CreationGuy
          last edited by

          @CreationGuy
          Yes, but that's a different problem with SSL.

          In the frontend you have to uncheck SSL offloading for port 80.

          If you want to access the server via SSL you need to configure the frontend with port 443 + SSL offloading and assign a proper certificate to it.

          CreationGuyC 1 Reply Last reply Reply Quote 0
          • CreationGuyC
            CreationGuy @viragomann
            last edited by

            @viragomann I do, I have other services such as portainer, FileBrowser (Docker that has no SSL so HAProxy assigns on via Cloud Flare). The difference here is searx is on a totally separate server than the one running portainer.

            V 1 Reply Last reply Reply Quote 0
            • V
              viragomann @CreationGuy
              last edited by

              @CreationGuy

              246bc42e-d4a5-4108-921d-90b8a1d8025c-grafik.png

              But port 80 + SSL offloading will not work in the browser as long as you don't state the port like https://searx.mydomain.net:80

              CreationGuyC 1 Reply Last reply Reply Quote 0
              • CreationGuyC
                CreationGuy @viragomann
                last edited by

                @viragomann I guess I don't know how to explain it.

                SearxNG installs in a folder /searxng so when you go to to apache searver, in my case, http://10.20.20.8, I get the apache hello page, if I go to http://10.20.20.8/searxng I get the searxng engine.

                I want to use HA proxy to just use my cert when going to https://searx.mydomain.net

                V 1 Reply Last reply Reply Quote 0
                • V
                  viragomann @CreationGuy
                  last edited by

                  @CreationGuy said in HAProxy - can't get a site to work:

                  I want to use HA proxy to just use my cert when going to https://searx.mydomain.net

                  So when your enter this into your browser (with https in front as scheme), the browser to the the port 443!
                  Thus the frontend has to listen on port 443 and provide a proper SSL certificate, since the browser is expecting it.

                  No matter which port your backend server is listening on. This might be 80 or whatever and has to be stated in the backend settings.

                  CreationGuyC 1 Reply Last reply Reply Quote 0
                  • CreationGuyC
                    CreationGuy @viragomann
                    last edited by

                    @viragomann I belive I understand that but isn't that what HAProxy is doing for my other websites/services?
                    Why won't it work for this one service?
                    DNS Host Overrides:
                    DNS Host Override.jpg
                    front.jpg
                    Screenshot 2024-04-23 at 17-18-24 TheWall.jrfam.net - Services HAProxy Backend Edit.png

                    CreationGuyC 1 Reply Last reply Reply Quote 0
                    • CreationGuyC
                      CreationGuy @CreationGuy
                      last edited by

                      Thank you for your help, after a reboot of the router, it is now working.... thank you again!

                      V 1 Reply Last reply Reply Quote 0
                      • V
                        viragomann @CreationGuy
                        last edited by

                        @CreationGuy said in HAProxy - can't get a site to work:

                        after a reboot of the router, it is now working....

                        Of pfSense?
                        Strange. HAproxy should be restarted on each configuration change anyway.

                        CreationGuyC 1 Reply Last reply Reply Quote 0
                        • CreationGuyC
                          CreationGuy @viragomann
                          last edited by

                          @viragomann Yes, not sure why that made a difference but it's working.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.