Reverse proxy nginx letsencrypt tutorial

Поділитися
Вставка
  • Опубліковано 2 гру 2024

КОМЕНТАРІ • 168

  • @benjamink7311
    @benjamink7311 4 роки тому +15

    Sure I would like to see how to implement wildcard certificate

  • @MarkMarooth
    @MarkMarooth Рік тому +2

    Thank you sir, your videos and tutorials are outstanding. Really helped me to get services behind a reverse proxy in a Docker environment where I already have LE certificates for the domain. I just did a happy dance in my lab and I'm sure my client will be doing the same once I show them. Now I must head over to patreon and give a wee bit back for your hard work and generosity!

  • @carlospallardo
    @carlospallardo 8 місяців тому +1

    Greetings Christian
    Thank you for your contributions, these videos are very interesting.

  • @fischer-felix
    @fischer-felix 2 роки тому +2

    Amazing tutorial, helped me a lot with apache guacamole, as I could not find a specific tutorial and all the ones I found were wayyyy more complicated. Keep up the good work!

  • @catraaaw
    @catraaaw 3 роки тому +18

    Hello Christian, great videos! You forgot to mention one thing in 'Check if auto-renew is working' section: the cronjob won't be executed on systems with systemd (it's written in the comment section of the cronjob after 'Important note!'). So the correct way of checking auto-renewal would be verifying if certbot.timer is active (either by systemctl list-timers or systemctl status certbot.timer)

    • @christianlempa
      @christianlempa  3 роки тому +2

      Thank you so much! Also for sharing the details!

  • @ibnurasikh
    @ibnurasikh Рік тому

    this is my (I don't know, maybe) 5-6 times back to this video, Chris especially in this video is very very my go-to solution in every server I have, I try so many videos about this nginx reverse proxy and SSL things, and no one has very well clear explanation and solving my problem, this video is only one that can solve, and I try in my all servers, and of course, no one fails. really appreciate Chris, you're my man!

  • @adrianhartwig2646
    @adrianhartwig2646 2 роки тому

    Endlich ein Howto ohne Docker. Vielen Dank du sparst mir viel Arbeit!

  • @ForrestRhoads
    @ForrestRhoads 4 роки тому +4

    Yes, please augment your excellent video by showing how to do certification for Wireguard. Vielen Dank.

  • @roshanshibu6637
    @roshanshibu6637 4 місяці тому

    Concise, well presented and straight to the point! Thank you very much

  • @SHAMITHADEVINDA
    @SHAMITHADEVINDA 2 місяці тому

    I finally found the correct content, this is the way to configure reverse proxy and point traffic to out tomcat applications etc. Thanks for the video

  • @christopherpeterson6004
    @christopherpeterson6004 Рік тому

    This excellent presentation requires more likes and share, thank you

  • @matheusreimer8692
    @matheusreimer8692 3 роки тому +10

    Thanks man, Really apreciate when someone explains the code instead of just copy pasting for us

  • @Luukullus
    @Luukullus 2 роки тому

    Vielen vielen Dank!
    Das Video hat mir sehr gut weitergeholfen und ich es wurde auch sehr gut erklärt. Zu keiner Zeit habe ich Probleme gehabt zu wissen was ich da überhaupt mache.

  • @Mikesco3
    @Mikesco3 3 роки тому

    This earned my subscription... Excited for video of this on docker

    • @christianlempa
      @christianlempa  3 роки тому

      Thanks mate! I already did some videos about Docker, Kubernetes is coming soon as well :)

  • @alainmilette6460
    @alainmilette6460 2 роки тому

    Wow! This is an exceptional tutorial. Thank you so much, exactly what I needed.Will definitely check out all the rest of your content!

  • @AllahomAnsorGaza
    @AllahomAnsorGaza 3 роки тому

    man i LOVE YOU
    BRO really you make my day after 6 hours of searching you save me

  • @grf0
    @grf0 2 роки тому

    one of those great tutorials that all you have to do is follow step by step and it really works! huge thanks

  • @cloudiec2121
    @cloudiec2121 2 роки тому

    Very Great tutorial. Very clear. Thanks for helping!

  • @carlosebelchior
    @carlosebelchior Рік тому

    Thank you very much Christian, you helped me with a big issue, thanks!!

  • @georgeloya8439
    @georgeloya8439 3 роки тому +1

    Thank you! This is really helpful man.

  • @stephennwakasi4631
    @stephennwakasi4631 2 роки тому

    A very detailed explanation. Thank you

  • @mandrael
    @mandrael 2 роки тому

    Hi, thanks for the video! I first used the nginx proxy with HestiaCP, which has apache & nginx reverse proxy out of the box. And it creates the let's encrypt certificates via nginx conf files (cpanel on the contrary creates real directories and DNS entries to have the acme challenge).

  • @LaMenteInfinita-db7ym
    @LaMenteInfinita-db7ym 7 місяців тому

    Thank Chirstian, it helps me a lot.

  • @arijitdn
    @arijitdn Рік тому

    This is the video I was looking for

  • @Mitsunee_
    @Mitsunee_ Рік тому

    I've attempted to learn nginx like 4 times and this was the first video that mentioned that you can just define multiple server blocks. I feel really dumb right now, especially since this video is also already 2 years old, so I probably could've found it the first time.

  • @JeanFrancoCaringi
    @JeanFrancoCaringi 4 роки тому +2

    Another interesting topic: how to use names instead of IP addresses in your LAN
    Thanks!

  • @facundoerbin4947
    @facundoerbin4947 2 роки тому

    ¡¡Thanks a lot!! After many research finally got to your video and solved my sites ssl conection errors.

  • @sujanpoojary4701
    @sujanpoojary4701 3 роки тому

    Master class content

  • @JeanFrancoCaringi
    @JeanFrancoCaringi 4 роки тому

    Great, thanks!
    Please add to your next episodes list:
    Backup management, if it is Borg, it will be great

  • @weirdo3116
    @weirdo3116 Рік тому

    thanks for this video. it helped me a lot!

  • @babunethaji
    @babunethaji 2 роки тому

    thank youuuuuu sooooo muchhhhhhhhh I am trying for last 2 days day and night :-( for this
    your really really great thank you sooooo much :-)

  • @GorkemYildirim
    @GorkemYildirim 4 роки тому

    So it is easier than thought. Thanks a lot.

  • @HEWfunkingKNEWit
    @HEWfunkingKNEWit 4 роки тому +2

    Nice tutorial. Yes pls show us how to add wildcards and how to add multiple website configuration.
    Just btw, this certbot is limited to 5 renews per day, if your encryption isnt working and you already tied 5 times unssuccessfuly, it still counts as a try. You will have to wait a day. You dont understand how many times I tried before finding that out 🤣

    • @christianlempa
      @christianlempa  4 роки тому +2

      Thank you so much for the feedback! I think multiple website configuration is really a great topic, also in combination with wildcard certs, so stay tuned :)

    • @dricci
      @dricci Рік тому

      @@christianlempa Did you ever create a video for multi site nginx with wildcard? I wasn't able to find it searching. Thank you!!

  • @riadhossainbhuiyan4978
    @riadhossainbhuiyan4978 2 роки тому

    great job man!

  • @osada96
    @osada96 2 роки тому

    Great explanation, thank you!

  • @henryvanho7971
    @henryvanho7971 Рік тому

    Great video Chris! Can you show how to configure Nginx on a container to reverse proxy other containers?

  • @skyliferp_marcel9743
    @skyliferp_marcel9743 2 роки тому

    so much. Can’t wait to start making soft.

  • @kloudkorner
    @kloudkorner 2 роки тому

    Amazing video...
    رائع جدا 😍😍😍😍

  • @rishiktiwari
    @rishiktiwari 2 роки тому

    Excellent!

  • @ferreolduboiscoli
    @ferreolduboiscoli Рік тому

    Life saver !

  • @danielleesposito5487
    @danielleesposito5487 2 роки тому

    i wanna see the wildcard cert video, sounds pretty gamer

  • @glen_nz
    @glen_nz 3 роки тому

    Hi Christian, excellent video. Perhaps in a future video you could do what I'm setting out to set up for myself: nginx reverse proxy with letsencrypt docker container that is able to serve up a site on a separate server (separate machine, IP, OS, etc), as well as from docker containers on the same docker host. I'm still trying to get my head around what I need to accomplish it as I'm a docker newbie myself.

    • @christianlempa
      @christianlempa  3 роки тому

      Hey man, I've done some video about portainer and nginx proxy manager, which both is about docker. Maybe this is what you need :)

    • @glen_nz
      @glen_nz 3 роки тому

      @@christianlempa Great! I will take a look, thank you!

  • @rafaeel731
    @rafaeel731 13 днів тому

    Interested to see if there is a follow-up for production envs, like with email verification step

  • @anwarzouhir214
    @anwarzouhir214 2 роки тому

    ore 1 day looking for a app that work, finally i found

  • @khalidelgazzar
    @khalidelgazzar 3 роки тому

    great video, thanks!

  • @harveynorman8787
    @harveynorman8787 3 роки тому

    Great stuff. Thanks

  • @abdurahmandahir646
    @abdurahmandahir646 4 роки тому

    As always good stuff, really enjoy the content this channel will grow mark my word. Please make a video also on traefik, 1 ip with 2 or more container or Web apps. That will help us home users who can get only 1 ip from their ISP
    Otherwise hack on !!!!

    • @christianlempa
      @christianlempa  4 роки тому

      Traefik is on my list, so that will fit very well with my future plans! Thank's for the great suggestion man!😀

  • @dimaboguzki2944
    @dimaboguzki2944 Рік тому

    Thank you😀

  • @Dahlah.FightMe
    @Dahlah.FightMe Рік тому +1

    Nice :D

  • @tigodi
    @tigodi 3 роки тому

    You helped me a buch :)

  • @Erikdulcesaludcl
    @Erikdulcesaludcl 2 роки тому

    Hello,
    Excellent videos. I ask you for advice on the following: I have wordpress installed on amazon linux 2 with nginx, mounted an EFS and an RDS. Connect an ALB to the instance, the instance can be accessed only from the ALB on port 80. All good if I access the ALB on port 80, but when I install the ssl certificate on the ALB, the page generates mixed content (Mixed Content: The page at '' was loaded over HTTPS, but requested an insecure stylesheet ''.)

  • @ayushjain-xh5ut
    @ayushjain-xh5ut 2 роки тому

    In this example For your domain name which domain name service provider you had gone for

  • @peakminute
    @peakminute 2 роки тому

    Hello, Christian, I have docker&portainer installed on my server. Now I want to use nginx as a reverse proxy. So the question is: do I need to install nginx on Ubuntu or deploy the container on docker?

  • @mrshafee95
    @mrshafee95 2 роки тому

    i love you man

  • @HEWfunkingKNEWit
    @HEWfunkingKNEWit 4 роки тому

    Letsencrypt is limted to 5 renews per 7 days. If you are trying to issue certs after 5 times even if failed, wait 1 week or use a different domain.

  • @jdmontes_me
    @jdmontes_me 5 місяців тому

    Make sure to forward port 80 and 443 on your router too

  • @MohsinShahSyed
    @MohsinShahSyed Рік тому +1

    How did nginx open in vscode?
    Can someone elaborate

  • @christophererobison618
    @christophererobison618 3 роки тому +1

    I'm new to the topic, new to nginx and using it to configure reverse proxies. I think I'm mostly in the target audience for this video. I've noticed something very strange in my searches for information so far, and this video is a good example. Up-front acknowledgement that nginx can be installed on a variety of operating systems, followed by a demonstration of configuring it that only applies to Debian and Ubuntu, using directories (sites-enabled, sites-available) that are specific to the packaging of nginx for those operating systems. And (apparently, I'm discovering) there are subtle differences in how they're used versus the standard directories (conf.d, default.d) you'd find elsewhere. I imagine plenty of people, including the presenter here, already understand the differences, but then such people are less likely to be in the target audience for this material. Why this popular assumption that nginx == ubuntu (again, not only here), and thus the assumption that only ubuntu-specific configuration needs to be covered?

  • @m-electronics5977
    @m-electronics5977 2 роки тому

    What I do now when I want to use the Reverse Proxy only for the incoming host but I want/must request the LE-SSL Certs in the machine where the web application is running?

  • @somedude5353
    @somedude5353 Рік тому

    Why use Visual Studio? Isn’t it for programming?

  • @m-electronics5977
    @m-electronics5977 2 роки тому +1

    But the video is very cool😊

  • @RealKeytones
    @RealKeytones Рік тому

    I cannot ever get a reverse proxy to work. Do I need to install nginx on EVERY container that I want to expose or can I install nginx proxy manager on 1 virtual machine and use that for every other virtual machine I want to expose

  • @ihsanizwer
    @ihsanizwer 2 роки тому

    Excellent tutorial. Is there a way to tell certbot to allow both http and https

  • @NatoBoram
    @NatoBoram 8 місяців тому

    Aaaaah I want this tutorial but with Docker so I can put it in my docker-compose homelab

  • @wchouser3
    @wchouser3 2 роки тому

    So apparently cert bot is a snap now do we still need the python module to generate the certs?

  • @stevennicholas5472
    @stevennicholas5472 2 роки тому

    I'm new to linux, but as far as i know, sudo apt update only returns a list of what needs updating, sudo apt upgrade is the command required to actually do the upgrade?

  • @gabrielwong1991
    @gabrielwong1991 2 роки тому

    Hi, in lets encrypt site it said to install certbot through snap… what are the difference by using apt get then? I cannot renew cert from installing through snap and no mention for installing python3-certbot-nginx

  • @redouanebenbiga9148
    @redouanebenbiga9148 2 роки тому

    the way you get a domaine is unclaire for me is from lets encrypt certificate ? or from a dedicated domaine server ? thanks for your effort

  • @madro6380
    @madro6380 3 роки тому

    Nice video! Unfortunately it doesn't work for me and I can't understand why. I have a domain with cloudflare and the challenge fail the authorization. Any idea? Thanks

  • @suvankardas7932
    @suvankardas7932 3 роки тому

    wildcard video please..really an effective one

    • @christianlempa
      @christianlempa  3 роки тому

      I did a video on wildcard certs on npm. Hope that is what you are looking for

  • @AlejandroHamann
    @AlejandroHamann 3 роки тому

    Another problem I have ...
    If within the local intranet, I want to access the web server (which is part of the same intranet), I do not want the path to be through the Internet, via a reverse proxy, to finally reach the server that was within the same intranet ... So, I thought about deploying a Split-Brain DNS, where the public address is resolved to an intranet IP, but for this, I need to have the LetsEncrypt certificate, on the local server (in addition to the reverse proxy ) ... again, the only thing I can think of is to export via NFS the directory that contains the certificates in the reverse proxy, to be able to mount them on the corresponding web server ...
    Is that so, or are other techniques used?

  • @andynorton7529
    @andynorton7529 2 роки тому

    Hallo Christian, danke für dieses Video. Allerdings hatte ich gehofft, Du zeigst wie man ein wildcard certificate einbindet und man sich so ein certificate für jede subdomain erspart.
    In meinem Fall habe ich Nextcloud auf Ubuntu server schon mit nginx installiert und möchte diesen jetzt mit einem wildcard certificate versehen, um auf Navidrome und den turnserver (für Nextcloud Talk) zugreifen zu können. Auf Truenas core funktionierte das wunderbar, für Ubuntu bin ich offensichtlich zu blöd.

  • @ericd2943
    @ericd2943 2 роки тому

    hey Christian, i'm trying to setup a reverse proxy Nginx to catch and route to a torrent web server internally and cant figure how, can you lend a hand?

  • @kemaq123
    @kemaq123 2 роки тому

    what policy do i put on the firewall to direct request to reverse proxy?

  • @Julillo24
    @Julillo24 3 роки тому

    Hi Christian, greetings from Colombia, I have a question..do Ihave to install the ssl certificate in the server that it has been proxyed ? thanks in advanced

    • @christianlempa
      @christianlempa  3 роки тому +1

      You can, but usually you just install the SSL cert on the reverse proxy, that terminates the connection. Then you don't need to install the cert on the read website/app itself.

  • @tanchwa3740
    @tanchwa3740 2 роки тому

    so I just tried this with my docker services, and I tried changing the locations for each of my apps.
    The first one, emby, works fine if try to access them with ipaddress/emby. However, even though the rest of the services are configured using the same syntax, they don't appear. They don't give me a 404 error either
    is there a limit on subsites you can configure or something?

  • @arthurrodrigues5382
    @arthurrodrigues5382 2 роки тому

    thanks!!

  • @AlejandroHamann
    @AlejandroHamann 3 роки тому

    And another question I have about it ...
    If my website uses HTTP2 (which requires SSL), can I point the reverse proxy to https: //mysslserver.intra.local/? (Assume that an SSL certificate issued by a local Root-CA trusted by both the webserver and the reverse proxy has been correctly configured on the destination web server).

  • @m4l490n
    @m4l490n 2 роки тому

    Awesome!! Thanks for the video!!
    I just have one question: what do I need to do if I want to have access to a web app and also a website, in this case, the default nginx web page? I noticed in this tutorial that now, when you go to the website, it is redirected to the Python simulated web app, but what about the nginx default webpage? How do you get to that now?

    • @christianlempa
      @christianlempa  2 роки тому +1

      Thank you so much! :) Have you looked into my NPM and Traefik videos? Might be an easier approach!

  • @mrdrizz9270
    @mrdrizz9270 2 роки тому

    Will this work for multiple apps/websites? Is it just a case of adding a second server block for the second app/website? And can you get 2 certificates the same way?

    • @christianlempa
      @christianlempa  2 роки тому

      Yes you can do all this, if you configure it

  • @hoatranquang8376
    @hoatranquang8376 Рік тому

    Dear Christian Lempa,
    I have problems.
    Safari browser can not connect my website. It's only connect pass with 80 port, no connect with 443 port
    meanwhile, chorme, firefox ...all connect with my website.
    I had tried many methods, but it is fault.
    Please, you and everyone help me.
    Thank you so much

  • @nahakuu
    @nahakuu 3 роки тому

    Can you please advice how to set up Nginx Proxy for Java app what is running on Ubuntu alongside of Nginx webserver?
    I made the proxy work for normal TCP 80/443 but I have problem to add there UDP, as the app needs access to TCP/UDP 80/443.
    I made proxy to localhost:5001 and localhost:5002
    But I cannot find any help on internet how to also use UDP

  • @vidsforfunxd9312
    @vidsforfunxd9312 3 роки тому

    Can you make a video on how you connected to your ssh server file system using Visual Studio Code. I installed Remote SSH in VS Code and logged in under the normal user but I can't login as the root user so I'm getting an error when I try to delete the default file under sites-enabled.

  • @thatguyfromca
    @thatguyfromca Рік тому

    why would someone want to hide the real server? I've seen this software used by pirate video sites to hid the video host.

  • @yooyoo8248
    @yooyoo8248 4 роки тому

    Thanks for this video! Can you show some more complicated configuration with "IF" and other conditions? I find IF to be vvery problematic in Nginx

    • @christianlempa
      @christianlempa  4 роки тому +2

      I will soon make a video about nginx multi-site configuration with wildcard certs, I also will put some other location recommendations in there. Don't know if this is what you're asking for but if you have a specific question you may also check out our discord community, I'm sure we can help you :)

  • @otix6301
    @otix6301 2 роки тому

    Mine looks notNice tutorialng like the way you guys started it would be amazing if soone told how to get the multiple tracks

  • @Shadowless_Kick
    @Shadowless_Kick Рік тому

    Do you have a tutorial for setting up a NGINX as reverse proxy for more than one web server behind it? Note the multiple web server are on the same system, in other words, they share the same IP address but are under folders of different users. For example, /home/user1/, /home/user2/ . Thanks

    • @christianlempa
      @christianlempa  Рік тому

      Not really, I started using other apps for rev proxy and load balancing that integrate better with my docker and k8s setup. Maybe take a look at my traefik videos :)

  • @patriciomartinez1929
    @patriciomartinez1929 Рік тому

    Excelent video Christian. I configured an nginx with lets encrypt and worked fine. The only problem I had is with css . The frontend I am proxying is not loading CSS , but if I go directly without passing through nginx the CSS load perfectly.
    Does anybody know how to solve this issue. The frontend is angular and is hosted on apache. Thanks in advance.

  • @nope6417
    @nope6417 2 роки тому

    Hello, I have a reverse proxy with Nginx and a webserver with apache2. The webserver is working well when running "alone" ... But if i add the reverse proxy on the top, it show me the default debian web page .... Any idea ?

    • @nope6417
      @nope6417 2 роки тому

      writing the full path of the DocumentRoot of my webserver in the "proxypass" seems to work :)

  • @viaprenestina3894
    @viaprenestina3894 3 роки тому +4

    too many things not explained

  • @kozie928
    @kozie928 3 роки тому

    I managed to get it working, but after the last step my nginx returns "404 Not Found
    nginx/1.14.0 (Ubuntu)" when I visit the site, even though the container is still running in docker-compose. Do you know what could cause this?

  • @xcoldrealityx
    @xcoldrealityx 3 роки тому

    Hello,
    Great tutorial! I am having a strange issue though where i followed your steps and it works great, however even though i have it pointing to my sub-domain, it also seems to be forwarding it to my top level domain as well, not sure why..

    • @christianlempa
      @christianlempa  3 роки тому

      Hey thanks, maybe check on our Discord and share you config.

  • @DiegoTapia-g8k
    @DiegoTapia-g8k 10 місяців тому

    I have a question. Does this work with a website inside an Intranet network, that is not reachable from the outside internet ? I still want to secure all requests to be encrypted.

    • @christianlempa
      @christianlempa  10 місяців тому

      sure that works regardless of the internet or local access, check out my other tutorials about dns server, letsencrypt and traefik. I'm all running it locally

  •  9 місяців тому

    Thank's

  • @AlejandroHamann
    @AlejandroHamann 3 роки тому +1

    Great tutorial.
    Excellent tutorial. Simple and clear.
    Now, I have a question. When the reverse proxy must redirect to several servers within a local intranet, I understand that the communication between the reverse proxy and each of the web servers on the local intranet must be done through http (and not https). But wouldn't that be unsafe?

  • @Valouuu
    @Valouuu 3 роки тому

    love u

  • @nikanicholas3280
    @nikanicholas3280 4 роки тому

    can you do one on a mac

  • @ChrisTingom
    @ChrisTingom 2 роки тому

    I need to find someone to help me get set up with a reverse dns proxy to 2 separate Webflow sites. Can anybody help?

  • @hamadaparis3556
    @hamadaparis3556 3 роки тому

    can I secure my web app without a web server like nginx or apache or nginx is required for ssl

    • @christianlempa
      @christianlempa  3 роки тому +1

      You can technically do all this stuff in your app, but usually it's easier to use something like a reverseproxy. Check out my video about nginx proxy manager, it's really easy.

    • @hamadaparis3556
      @hamadaparis3556 3 роки тому

      @@christianlempa awesome thanks bro

  • @prasadmanakondi9551
    @prasadmanakondi9551 Рік тому

    How to reverse proxy for azure web apps