pfSense, nginx reverse proxy and letsencrypt












2















I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.



Setup is as follows:



                                                     ->    192.168.0.4 www (apache2)

Internet ->     pfSense      ->    rproxy (nginx)    |

            1.2.3.4 (public)        192.168.0.3      ->    192.168.0.5 mail (apache2)


I can connect to www and mail using http / port 80, but I need https.





  1. How to set up nginx for https reverse proxy, my current setup is simple:



    server {
    
        listen 80;
    
        server_name www.domain.ovh;
    
        location / {
    
                 proxy_pass https://192.168.0.4:80;
    
        }
    
}
    

    
server {
    
        listen 80;
    
        server_name mail.domain.ovh;
    
        location / {
    
             proxy_pass https://192.168.0.5:80;
    
        }
    
}


  2. How to get letsencrypt to work with this setup.
    I also use letsencrypt for smtp / imap so the certs need to be on the mail host.



I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.






nginx pfsense reverse-proxy letsencrypt







share|improve this question

























  • Hi Scott, thanks a lot ;-) everything looks good.

    – Andrzej
    Dec 27 '18 at 18:33
















2















I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.



Setup is as follows:



                                                     ->    192.168.0.4 www (apache2)

Internet ->     pfSense      ->    rproxy (nginx)    |

            1.2.3.4 (public)        192.168.0.3      ->    192.168.0.5 mail (apache2)


I can connect to www and mail using http / port 80, but I need https.





  1. How to set up nginx for https reverse proxy, my current setup is simple:



    server {
    
        listen 80;
    
        server_name www.domain.ovh;
    
        location / {
    
                 proxy_pass https://192.168.0.4:80;
    
        }
    
}
    

    
server {
    
        listen 80;
    
        server_name mail.domain.ovh;
    
        location / {
    
             proxy_pass https://192.168.0.5:80;
    
        }
    
}


  2. How to get letsencrypt to work with this setup.
    I also use letsencrypt for smtp / imap so the certs need to be on the mail host.



I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.






nginx pfsense reverse-proxy letsencrypt







share|improve this question

























  • Hi Scott, thanks a lot ;-) everything looks good.

    – Andrzej
    Dec 27 '18 at 18:33














2












2








2








I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.



Setup is as follows:



                                                     ->    192.168.0.4 www (apache2)

Internet ->     pfSense      ->    rproxy (nginx)    |

            1.2.3.4 (public)        192.168.0.3      ->    192.168.0.5 mail (apache2)


I can connect to www and mail using http / port 80, but I need https.





  1. How to set up nginx for https reverse proxy, my current setup is simple:



    server {
    
        listen 80;
    
        server_name www.domain.ovh;
    
        location / {
    
                 proxy_pass https://192.168.0.4:80;
    
        }
    
}
    

    
server {
    
        listen 80;
    
        server_name mail.domain.ovh;
    
        location / {
    
             proxy_pass https://192.168.0.5:80;
    
        }
    
}


  2. How to get letsencrypt to work with this setup.
    I also use letsencrypt for smtp / imap so the certs need to be on the mail host.



I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.






nginx pfsense reverse-proxy letsencrypt







share|improve this question
















I need help configuring letsencrypt to work with an nginx reverse proxy and pfSense firewall / gateway.



Setup is as follows:



                                                     ->    192.168.0.4 www (apache2)

Internet ->     pfSense      ->    rproxy (nginx)    |

            1.2.3.4 (public)        192.168.0.3      ->    192.168.0.5 mail (apache2)


I can connect to www and mail using http / port 80, but I need https.





  1. How to set up nginx for https reverse proxy, my current setup is simple:



    server {
    
        listen 80;
    
        server_name www.domain.ovh;
    
        location / {
    
                 proxy_pass https://192.168.0.4:80;
    
        }
    
}
    

    
server {
    
        listen 80;
    
        server_name mail.domain.ovh;
    
        location / {
    
             proxy_pass https://192.168.0.5:80;
    
        }
    
}


  2. How to get letsencrypt to work with this setup.
    I also use letsencrypt for smtp / imap so the certs need to be on the mail host.



I have my own dns server behind pfsense that I have full control of. Domain names resolve over the internet with no issues.






nginx pfsense reverse-proxy letsencrypt




nginx pfsense reverse-proxy letsencrypt






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Dec 27 '18 at 18:51







Andrzej

















asked Dec 27 '18 at 17:22









AndrzejAndrzej

365




365













  • Hi Scott, thanks a lot ;-) everything looks good.

    – Andrzej
    Dec 27 '18 at 18:33



















  • Hi Scott, thanks a lot ;-) everything looks good.

    – Andrzej
    Dec 27 '18 at 18:33

















Hi Scott, thanks a lot ;-) everything looks good.

– Andrzej
Dec 27 '18 at 18:33





Hi Scott, thanks a lot ;-) everything looks good.

– Andrzej
Dec 27 '18 at 18:33










0






active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388180%2fpfsense-nginx-reverse-proxy-and-letsencrypt%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1388180%2fpfsense-nginx-reverse-proxy-and-letsencrypt%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

"Incorrect syntax near the keyword 'ON'. (on update cascade, on delete cascade,)

Image
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 2 total noob sorry any help greatly appreciated. I keep getting this "Incorrect syntax near the keyword 'ON'." heres my codes code one CREATE TABLE supplier ( supplierID INT PRIMARY KEY, ISBN INT FOREIGN KEY REFERENCES book(ISBN), price DECIMAL (5,2), ON UPDATE CASCADE, ON DELETE CASCADE, ); code two CREATE TABLE orders ( orderID INT PRIMARY KEY, customerID INT FOREIGN KEY REFERENCES customer(customerID), ISBN INT FOREIGN KEY REFERENCES book(ISBN), orderDate date, ON UPDATE CASCADE, ON DELETE CASCADE, ); Ive run out of stuff to try other than dumbing it down to uselessness.
Read more

Alcedinidae

Image
Alcedinidae Martin-pêcheur à dos bleu ( Alcedo azurea ) Classification (COI) Règne Animalia Embranchement Chordata Sous-embr. Vertebrata Classe Aves Ordre Coraciiformes Famille Alcedinidae Rafinesque, 1815 Les Alcédinidés ou Alcedinidae forment une famille d'oiseaux plus connus sous les noms de martins-pêcheurs et martins-chasseurs. Sommaire 1 Description 2 Répartition et habitat 3 Systématique 3.1 Liste alphabétique des genres 3.2 Liste des espèces 4 Chez les Anciens : l'alcyon 4.1 Étymologie (Littré) 4.2 Oiseau « fabuleux » ? 5 Notes 6 Articles connexes 7 Liens externes 7.1 Bibliographie Description | Ce sont des oiseaux compacts de taille petite à moyenne (10 à 46 cm), au bec droit et long, en forme de poignard. Leurs pattes sont courtes, et ils portent un plumage aux couleurs vives. Répartition et habitat | Cosmopolites, ils fréquentent surtout
Read more

RAC Tourist Trophy

Image
Pour les articles homonymes, voir Tourist Trophy. Le RAC Tourist Trophy est une course automobile organisée par le Royal Automobile Club d'Angleterre. Créée en 1905, cette course a fait partie des épreuves comptant pour le championnat du monde des voitures de sport entre 1953 et 1955, en 1958 et 1959, et entre 1962 et 1965. Après une interruption de 17 ans (l'épreuve s'arrête après 1988), le RAC Tourist Trophy reprend en 2005 sous l'égide de la FIA GT. Palmarès | John Napier sur Arrol-Johnston, vainqueur du premier RAC Tourist Trophy, en 1905. L'honorable C.S. Rolls, vainqueur du RAC Tourist Trophy 1906. Ernest Curtis, sur Rover 20 hp, vainqueur du RAC Tourist Trophy 1907. William Watson, vainqueur du RAC Tourist Trophy 1908. Kenelm Lee Guinness, vainqueur du RAC Tourist Trophy 1914 sur Sunbeam. Départ du RAC Tourist Trophy 1928. Louis Gérard, vainqueur du RAC Tourist Trophy 1938 sur Delage. Année Circuit Vainqueur
Read more