Setting up reverse proxy for ruTorrent (or other containers) with lets-encrypt

LeZero · 9. Juni 2019

Hi, I have a bit of a problem,

I'm trying to setup a reverse proxy for ruTorrent, and it is not working

I installed the linuxserver/letsencrypt image, and I was able to generate my certificate

My server can be accessed from the web (https://lezero.li)

So now I tried to edit the rutorrent.subdomain.conf file in /config/nginx/proxy-confs, in the Lets Encrypt container

This my docker containers setup

On my provider page, I also setup a CNAME entry for rutorrent

When I try to go to https://rutorrent.lezero.li/ I'm prompted for the openmediavault panel

Could someone point me in the right direction?

Morlan · 10. Juni 2019

try also to join rutorrent in the my-docker-net network.
Also could you post the log of your letsencrypt docker?

LeZero · 10. Juni 2019

So I added the argument --network my-docker-net to the rutorrent container (same network as the letsencrypt container), to no avail,

Here is my letsencrypt log

Code

-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/




Brought to you by linuxserver.io
We gratefully accept donations at:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------


User uid:    1001
User gid:    100
-------------------------------------


[cont-init.d] 10-adduser: exited 0.
[cont-init.d] 20-config: executing...
[cont-init.d] 20-config: exited 0.
[cont-init.d] 30-keygen: executing...
using keys found in /config/keys
[cont-init.d] 30-keygen: exited 0.
[cont-init.d] 50-config: executing...
Variables set:
PUID=1001
PGID=100
TZ=europe/paris
URL=lezero.li
SUBDOMAINS=omv,sonarr,cp,rutorrent
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
DHLEVEL=2048
VALIDATION=dns
DNSPLUGIN=ovh
EMAIL=
STAGING=


2048 bit DH parameters present
SUBDOMAINS entered, processing
SUBDOMAINS entered, processing
Sub-domains processed are:  -d omv.lezero.li -d sonarr.lezero.li -d cp.lezero.li -d rutorrent.lezero.li
E-mail address entered:
dns validation via ovh plugin is selected
Certificate exists; parameters unchanged; starting nginx
[cont-init.d] 50-config: exited 0.
[cont-init.d] 99-custom-files: executing...
[custom-init] no custom files found exiting...
[cont-init.d] 99-custom-files: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see https://github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from https://openresty.org/en/download.html)
nginx: [error] lua_load_resty_core failed to load the resty.core module from https://github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from https://openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
	no field package.preload['resty.core']
	no file './resty/core.lua'
	no file '/usr/share/luajit-2.1.0-beta3/resty/core.lua'
	no file '/usr/local/share/lua/5.1/resty/core.lua'
	no file '/usr/local/share/lua/5.1/resty/core/init.lua'
	no file '/usr/share/lua/5.1/resty/core.lua'
	no file '/usr/share/lua/5.1/resty/core/init.lua'
	no file '/usr/share/lua/common/resty/core.lua'
	no file '/usr/share/lua/common/resty/core/init.lua'
	no file './resty/core.so'
	no file '/usr/local/lib/lua/5.1/resty/core.so'
	no file '/usr/lib/lua/5.1/resty/core.so'
	no file '/usr/local/lib/lua/5.1/loadall.so'
	no file './resty.so'
	no file '/usr/local/lib/lua/5.1/resty.so'
	no file '/usr/lib/lua/5.1/resty.so'
	no file '/usr/local/lib/lua/5.1/loadall.so')
Server ready

Alles anzeigen

And the log for rutorrent

Code

-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/




Brought to you by linuxserver.io
We gratefully accept donations at:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------


User uid:    1001
User gid:    100
-------------------------------------


[cont-init.d] 10-adduser: exited 0.
[cont-init.d] 10-nginx-fix: executing...
Current version detected.
[cont-init.d] 10-nginx-fix: exited 0.
[cont-init.d] 20-config: executing...
[cont-init.d] 20-config: exited 0.
[cont-init.d] 30-keygen: executing...
using keys found in /config/keys
[cont-init.d] 30-keygen: exited 0.
[cont-init.d] 50-config: executing...
[cont-init.d] 50-config: exited 0.
[cont-init.d] 99-custom-files: executing...
[custom-init] no custom files found exiting...
[cont-init.d] 99-custom-files: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.

Alles anzeigen

Thank you for replying

raulfg3 · 10. Juni 2019

your letsencrypt docker have poblems to start

you must see something like 0.0.0.0 443->443 ans it's not show: 443/tcp its not correct:

mine is:

If you use button modify to change something in a running docker, you MUST REVISE name and network type and change to Bridge again prior to save , otherwise your dockers broke like you see in your case.

PD: Please edit your post to delete real e-mail and sensitive data, is not needed to help you

LeZero · 10. Juni 2019

Yes, I edited it out, thanks.

Ok so I modified the letsencrypt container to be in bridge mode with proper ports:

But I still dont get the redirection

raulfg3 · 10. Juni 2019

on your letsencrypt config try ONLY_SUBDOMAINS=true

actually is FALSE

Code

SUBDOMAINS=omv,sonarr,cp,rutorrent
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
DHLEVEL=2048
VALIDATION=dns
DNSPLUGIN=ovh
EMAIL=
STAGING=

validation must be HTTP
and email is mandatory

PD: your actual cert for https://lezero.li is a local cert not a letsencrypt cert:

mine is:

Code

ariables set:
PUID=1001
PGID=2002
TZ=Europe/Madrid
URL=myrul.com
SUBDOMAINS=omv,airsonic,heimdall,mlnet,plex,transmission,wetty,myvpn,portainer,pihole,pvideo,netdata,tautulli,unifi,pnas,medusa,sonarr,radarr,nzbget,jackett,cardigann,nvr
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=true
DHLEVEL=2048
VALIDATION=http
DNSPLUGIN=
EMAIL=myemail@outlook.com
STAGING=

Alles anzeigen

raulfg3 · 10. Juni 2019

PD: Please read my post: https://forum.openmediavault.o…with-multiples-CN-and-IP/

For a cert that works on your LAN that works like letsencrypt ( only for local resolution on DNS names & IP)

Jetzt mitmachen!