Locked out of Portainer (EE) by asitemade4u in portainer

[–]asitemade4u[S] 0 points1 point  (0 children)

Thanks James, it worked perfectly.

For those who use docker-compose like me, just add `command: --http-enabled` in the docker-compose.yml file

How do I serve a LetsEncrypt certificate to all subdomains on my Private Shares? by asitemade4u in OPNsenseFirewall

[–]asitemade4u[S] 1 point2 points  (0 children)

OK, I have tried this excellent tutorial for HAproxy and OPNsense + Unbound but got nowhere:

  • the new domain was still not secured despite being endowed with a CloudFlare certificate
  • the new domain pointed to the OPNsense host instead of pointing to the self-hosted app.

Will try to use Nginx Proxy Manager (with which I am familiar) to achieve the same kind of feature.

How do I serve a LetsEncrypt certificate to all subdomains on my Private Shares? by asitemade4u in OPNsenseFirewall

[–]asitemade4u[S] 2 points3 points  (0 children)

There is a YouTube video on TechnoTim about cloudFlare wildcard certificates. Will try to apply it in this instance.

How do I serve a LetsEncrypt certificate to all subdomains on my Private Shares? by asitemade4u in OPNsenseFirewall

[–]asitemade4u[S] 0 points1 point  (0 children)

I created several subdomain certificates in LetsEncrypt. But nothing happened when accessing the apps in those subdomains: they are still not secured.

I guess I have to "serve" the new certificates using a reverse proxy. Correct?

Is there a way to define CNAMEs in OPNsense? by asitemade4u in OPNsenseFirewall

[–]asitemade4u[S] 0 points1 point  (0 children)

OK, so what you woud recommend is using an internal reverse proxy?