nextcloud
-
Hi everyone, I have questions
I want to see if I can get nextcloud working. I have been trying for longer than a week and no joy.
I'm pretty new at doing this so bear with me.I'm not sure which reverse proxy to use or even if I need one. The problem I have so far is all of the guides I have been able to find are so out of date they no longer apply. I'm not smart enough to figure out how to translate between the older and newer versions.
I have a domain. I have a wildcard certificate. I have pfSense happily running on its very own system.
I have tried tailscale. This doesn't work because for some reason, they want to have an underscore at the beginning of the name for the domain check. My provider, noip.com does not allow the name to begin with an underscore. I'm not changing providers. If I have to do that to get it to work, I guess it will never work.
Also, with tailscale, I started a support ticket with them and never heard back. I understand I'm using free stuff; they're not obligated in any way to help me. Maybe they'll get back to me sooner or later.So far, I have tried several different configurations, and none have led to success. I have tried Windows and Ubuntu with docker (desktop and CLI). I have tried Synology NAS with container manager and portainer. I am at the end of my rope. I have never been able to get past the "submit domain" part of the install. It tels me I need a reverse proxy or my ports aren't open. I will need help from people with more knowledge than I have. If it's possible, I'd rather do it with a GUI than CLI, but I'm willing to try whatever. I have nothing to lose.
It doesn't matter to me how it happens as long as it's reasonably secure and actually works.
I have not tried wireguard yet. I don't think it will fit my needs, but what do I know? My understanding is it uses some kind of proprietary VPN, not sure. I'm looking at something I could access from anywhere using a browser without having to install anything.
I have a lot more questions than answers.
Anyway, thanks to anyone willing to help, Jack
-
@makeitso forget pfsense for a second. Do you have an operational install of nextcloud that you can access locally via either http://ipaddress or https://ipaddress
How you access that remotely means nothing if you don't have an actual instance you can access locally.
-
@johnpoz yes. I can access it using the local IP and port 8080 like you posted. I just can’t get past the submit domain page. It says port 443 is not reachable.
I’ve tried everything I can find online. At this point, I just keep finding the same guides over and over.
Thanks for the reply!Jack
-
@makeitso Where is that wildcard certificate?
Not sure if General pfSense Questions is the right place, Off-Topic & Non-Support Discussion would be a better fit.
-
I just can’t get past the submit domain page.
Where are you trying to submit it exactly? Its been awhile I setup nextcloud.
Does pfsense wan have a public IP? Or are you behind a cgnat?
@Bob.Dig yeah we could move it if more about setup of nextcloud.. Since has an local IP he can access it would be more just a port forward question to be honest, and maybe split dns or nat reflection question.
-
yes. I can access it using the local IP and port 8080 like you posted
Just to clarify:
- can you access the Nextcloud webinterface (https://<ip or internal name>) from a local client and upload documents, images and so on?
- your goal: from where do you want to access your Nextcloud instance? From your internal network only or also from the internet?
-
@patient0 he mentions from anywhere - with just a browser.. So not sure why he playing tailscale and any other vpn solution.. Because that is more than a browser ;)
@makeitso so you own a domain? Trying to use free one? You want to use letsencrypt cert?
If your hosting nextcloud locally - just put it into a dmz segment and setup a port forward, you could use haproxy for your reverse proxy to handle your ssl.. Now you could access from anywhere with just a browser.. Take all of a few minutes to setup.. And if you can access http://ipaddress:8080 locally it pretty straight forward setup. I host a service service like that, not nextcloud - but pfsense doesn't care what it is, just need an IP and port. You could even get rid of the 8080 via haproxy and just use https://yourdomainname.tld both internally and externally.
But we need to know your pfsense actually has a public IP on its wan that internet can get too, and what domain and cert your wanting to use, etc.
-
he mentions from anywhere - with just a browser.
My text processing engine can't read that out of his text :) Maybe you are right, let's see what the answer.
-
@patient0 yeah - without more info not much to do to help him actually deploy it. If behind a cgnat which is quite possible. Maybe a cloudflare tunnel would be a good solution. Don't they have what they call quick tunnels now.. I have not played with them yet.. But if I was behind a cgnat and wanted to host a service a cloudflare tunnel would be first thing I would look at.
Shoot even if has public IP, maybe he wants to go that route for the added security - depending on how tight his tinfoil hat is, etc.
edit: btw edited the subject - the missing t was bugging me ;)
-
@Bob.Dig
I apologize if this is not the correct place to post this.
Not sure what you mean by where it is. Do you mean the place I purchased it at? If so I got through No-IP from RapidSSL Wildcard DV. -
@johnpoz after you install nextcloud when you go to the local ip to access it there’s a page with a passports that says to wrght it down. When you click on that it opens the login page where you use the pass phrase. Than another page opens that says”new AIO instance” and requests a domain. When I enter my domain and click on “submit”, I get a message saying cannot talk to server or that port 443 is not open.
I’m not sure what cgnat even is. Like I said, I’m a beginner. I am using whatever nat pfsense provides.
Thanks , Jack
-
@patient0
No, I haven’t been able to upload anything yet.Thanks, Jack
-
It doesn’t have to be just a browser, but anywhere, yes.
How do I put it in a DMZ zone?
I have tried to setup reverse proxy with haproxy but no luck.
Thanks, Jack
-
@makeitso you need a working nextcloud before you worry about remote access. What domain are you wanting to use.. I would set it up just locally with the domain your currently using locally - ie something like home.arpa.
Once you have a fully working nextcloud locally - we can worry about remote access to it..
-
FYI, this is the screen I get. I believe this is working locally. Maybe not. I cannot get past this screen. When I enter my domain name into the text box and click on submit
this is what happens. I cannot get past the submit domain.
I have this port forward as an alias in pfSense. I have pfSense admin port set to 8480.
I'm not sure what else I need to do, thus the reason I'm here. If I need to do something else for local access, I have no idea what.
Thanks, Jack
-
@makeitso and what is the fqdn you are putting there nextcloud.what.tld ? send it to me in a chat.. If you don not want to post it. Does this resolve public? Does it resolve locally the IP your running nextcloud on?
-
You have the source ports set to Nextcloud in the forward that should 'any'. The source port is usually a random port on the client.
-
Yup good catch @stephenw10 that is never going to work. But we also don't even know if he has a public IP on pfsense wan.
-
I changed the ports to "Any" on the "Wan" address. the FDQN of the server is starship.makeitso.com.
It resolves as an "A" record and a text record according to google.
Also, when I do dns lookup from inside pfSense, it comes up with wrong address. It's one that I had used prevously. I don't know how to change that either. I think it will go away if I wait.
I did manage to get into the lodal interface. I used "https://localhost:8080/containers?skip_domain_validation".
Thansk, Jack
-
Actually you also source address set to 'wan address' and that should also be 'any'. It has to match traffic coming from clients at any external address. So more like:
But it's not going to pass that validation until the fqdn resolves to the wan address so that remote test is able to connect using it.
Privacy Policy · Cookie Policy