Login to a blank page

brynjar

@girish I get this:

"<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
"

girish

@brynjar Did you do http by any chance or was it https? Can you paste the output of curl -v https://my.domain.com (maybe remove any sensitive stuff). But I feel this is probably your router login page or something, let's see.

brynjar

@girish This is from http - https gives an ssl error.

"curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
"

girish

@brynjar curl -kv https://my.domain.com then (-k will accept self-signed cert)

brynjar

@girish I get the login page of the router, pfsense. This is a dns rebind blocking thing.

brynjar

@girish Disabling dns rebind check does not change anything. Not sure why.

girish

@brynjar Given this is a server in the local network, how do you plan to make the mail server make anyway? It will need inbound port 25 (does your ISP allow this?) for email to work at all.

Anyway if you have a plan for all that ... Cloudron uses a DNS server called unbound internally. You can configure unbound to make queries via an intermittent resolver, for example, maybe pfsense. Then in pfsense you can configure my.domain.com to point to your internal IP. This ways curl my.domain.com from inside Cloudron will work. There's some info at https://docs.cloudron.io/networking/#internal-dns-server (instead of cloudron.lan in the example you would use domain.com)

brynjar

@girish This server is on a corp network with more then one external ip's. I have all traffic for one external ip natted to the cloudron server, both directions.

girish

@brynjar Ah ok. FWIW, this is only a problem with SOGo. They made a change where the IMAP/SMTP servers must have a proper certificate and there is no way to work with self-signed certs. rainloop/roundcube are configured to use the internal docker hostnames, so they don't have this problem iirc.

brynjar

@girish Damn it, Sogo is the only webmail I like of these, Roundcube is so boring.

Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.

Cloudron Forum

Login to a blank page