<![CDATA[Cloudron and Apps Behind a Proxy]]>Has anyone tried to put an entire CR behind another NGinx proxy? I suspect that's a nono but wanted to check. I only get one IP address and want to route some things to CR and some things to "Other" stuff.

]]>https://forum.cloudron.io/topic/4463/cloudron-and-apps-behind-a-proxyRSS for NodeMon, 10 Aug 2026 23:50:50 GMTSun, 14 Feb 2021 21:26:43 GMT60<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Sun, 19 Mar 2023 02:43:14 GMT]]>I'll create a new thread on this topic.

]]>https://forum.cloudron.io/post/63421https://forum.cloudron.io/post/63421Sun, 19 Mar 2023 02:43:14 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Sun, 19 Mar 2023 02:15:23 GMT]]>@girish said in Cloudron and Apps Behind a Proxy:

X-Forwarded-For

I got it setup like this but doesn't seem to work. Does anyone have better luck?

9f724bc0-e28a-4000-870a-ba88d58e4676-image.png

]]>https://forum.cloudron.io/post/63420https://forum.cloudron.io/post/63420Sun, 19 Mar 2023 02:15:23 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Fri, 03 Mar 2023 07:39:43 GMT]]>@alwynispat X-Forwarded-For should be set when forwarding. Does nginx proxy manager support reading the IP from a header?

]]>https://forum.cloudron.io/post/62675https://forum.cloudron.io/post/62675Fri, 03 Mar 2023 07:39:43 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Fri, 03 Mar 2023 01:05:08 GMT]]>@doodlemania2 somewhat related, does the apps in cloudron report client ip as your nginx proxy manager's ip or their true ip?

]]>https://forum.cloudron.io/post/62668https://forum.cloudron.io/post/62668Fri, 03 Mar 2023 01:05:08 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Sun, 26 Jun 2022 21:21:17 GMT]]>@Jan-Macenka that's almost exactly what i did. check your firewalls and make sure you aren't blocking 443 inbound from your CR server on your private IP address?

]]>https://forum.cloudron.io/post/50195https://forum.cloudron.io/post/50195Sun, 26 Jun 2022 21:21:17 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Thu, 23 Jun 2022 11:30:37 GMT]]>@fbartels tried that aswell but with no success so far. I'll keep trying and can post again if I am successfull.

]]>https://forum.cloudron.io/post/50063https://forum.cloudron.io/post/50063Thu, 23 Jun 2022 11:30:37 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Tue, 21 Jun 2022 21:13:26 GMT]]>@Jan-Macenka I would expect that you need to change the destination port to https…:443.

]]>https://forum.cloudron.io/post/49903https://forum.cloudron.io/post/49903Tue, 21 Jun 2022 21:13:26 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Tue, 21 Jun 2022 21:02:20 GMT]]>@doodlemania2 thank you for the suggestion. I replicated the setup though with no success as of yet. Could you be so kind and check if you did anything different?

Here is what I did:

Created DNS Records pointing to the public IP which will lead to the NPM:
31e5a8b6-3a63-4cd9-b01f-b7536df0b96d-image.png

Configure Wildcard certificate in NPM pointing my *.<DOMAIN> to the server within the private network.
a0c95c1a-e116-4206-962f-a2f80ed2cc12-image.png

Set Cloudron DNS to NoOp:
<for some reason cant paste the screenshot>

I notices that there is also a "Wildcard" Option in the CR DNS Settings but choosing this one also yielded no success. Any hint on what you did differently?

]]>https://forum.cloudron.io/post/49902https://forum.cloudron.io/post/49902Tue, 21 Jun 2022 21:02:20 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Tue, 21 Jun 2022 18:38:01 GMT]]>@Jan-Macenka I did! Here's my setup:

  1. Set up a wildcard cert with nginx proxy manager
  2. I forward *.domain bound for Cloudron to my cloudron server (in my instance located via a wireguard tunnel)
  3. I set DNS in Cloudron to NoOp

Easy peasy!

]]>https://forum.cloudron.io/post/49894https://forum.cloudron.io/post/49894Tue, 21 Jun 2022 18:38:01 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Tue, 21 Jun 2022 08:18:35 GMT]]>@doodlemania2 did you make any progress here?

My Use-Case:
I love CR for my own business and recommended it to one of my clients aswell. We want to operate it in their own infrastructure so in some private networks that are not fully exposed to the internet ans also I cant route 80/443 soley to CR since they are also operating other Web-Services which are not available in CR.

What I am trying to achieve
Get cloudron to run on a private network behind a NginxProxyManager in parallel to other web-services.
SSL handling can be left to CR and Nginx should behave like a proxy server but only for sub-domains that are in conjunction with CR-Services. Ideally the forwarding rules would automatically get updated through

What I tried so far
Pretty much what you and others also tried. Setup is:
Internet => NignxProxyManager => Cloudron as VM on a lager ESXi in Parallel to other Webservices

Did you make any progress there or gave up eventually?

]]>https://forum.cloudron.io/post/49878https://forum.cloudron.io/post/49878Tue, 21 Jun 2022 08:18:35 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Wed, 03 Mar 2021 01:57:03 GMT]]>@girish ahhh that's cool! Sad for me, using Azure DNS 😞
I'm gonna try and figure out how to make my NGinx let both HTTP and HTTPS through on the same domain name - that would seem to be an obvious option hehe

]]>https://forum.cloudron.io/post/26906https://forum.cloudron.io/post/26906Wed, 03 Mar 2021 01:57:03 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Wed, 03 Mar 2021 01:02:04 GMT]]>@doodlemania2 Cloudron does not require http for certs if you use the programmatic DNS backends (since it obtains certs by putting entries in DNS and not using http callbacks).

]]>https://forum.cloudron.io/post/26904https://forum.cloudron.io/post/26904Wed, 03 Mar 2021 01:02:04 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Tue, 02 Mar 2021 22:42:34 GMT]]>well, spoke almost too soon - now that I've got that up and running, I thought that I could force https, but Let's Encrypt doesn't like that because it needs to hit HTTP at a well known endpoint. So, am going to continue to tinker to see if I can pass both http and https

]]>https://forum.cloudron.io/post/26898https://forum.cloudron.io/post/26898Tue, 02 Mar 2021 22:42:34 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 22:36:40 GMT]]>@doodlemania2 Can confirm I can see it with proper certs 🙂

]]>https://forum.cloudron.io/post/26826https://forum.cloudron.io/post/26826Mon, 01 Mar 2021 22:36:40 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 21:42:25 GMT]]>@girish I think it's clean now - I tweaked the nginx. Should be able to see it at https://conference.apps.thedoodleproject.net huzzah!

]]>https://forum.cloudron.io/post/26821https://forum.cloudron.io/post/26821Mon, 01 Mar 2021 21:42:25 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 21:35:38 GMT]]>@doodlemania2 I think this is because nginx proxy manager does not have valid certs for the conference subdomain. Does it say it has valid certs?

]]>https://forum.cloudron.io/post/26819https://forum.cloudron.io/post/26819Mon, 01 Mar 2021 21:35:38 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 21:32:02 GMT]]>@girish Some success! This is wicked cool - and, by the way, I now have BBB server up and running for CR folks to use anytime they/yall need.

One question - when I go to my CR sites now, I am getting a cert error - you indicated that would likely happen I think. Any way to avoid that?

https://conference.cloudromdomain is nginx proxy to https://ip-address-of-cloudron.

]]>https://forum.cloudron.io/post/26817https://forum.cloudron.io/post/26817Mon, 01 Mar 2021 21:32:02 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 19:47:31 GMT]]>@doodlemania2 As a first step, you can try this to understand how it might work:

curl -k -H 'Host: app.domain.com' https://<cloudron-server-ip>

To explain the above, first we try to reach the cloudron server by IP via https. In your case, (if I understood your setup), this IP will be the intranet cloudron server IP (and not the public one). Next, the Host header helps (cloudron) nginx decide which vhost/app the request is meant for. Finally, the -k is needed because curl will not be able to match the server cert because we are accessing by IP but the cert will be whatever the host header was set to.

If the above works, you just have to make it work in the above UI:

  • Make sure destination is https://ip
  • I am guessing the Host header is automatically set
  • You have to accept the cert.
]]>https://forum.cloudron.io/post/26803https://forum.cloudron.io/post/26803Mon, 01 Mar 2021 19:47:31 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 19:34:14 GMT]]>@girish this is likely just me not knowing how nginx works:
b0149683-057f-4568-a486-df75e7c59e1f-image.png
Was hoping crtest.altdomain would pass to existing my.apps.primarydomain and it would "just work" but I got the "You've found a cloudron in the wild"

That was somewhat expected cause the CR doesn't know about crtest.altdomain. Was kind of hoping NGinx would have done that translation for me by keeping the destination as the 'URL' that I wanted.

I suppose I could create a crtest.altdomain in CR and things would magically just start working, but I'd have to assign the altdomain names to each of my apps, I think??

]]>https://forum.cloudron.io/post/26802https://forum.cloudron.io/post/26802Mon, 01 Mar 2021 19:34:14 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Mon, 01 Mar 2021 16:34:23 GMT]]>@doodlemania2 said in Cloudron and Apps Behind a Proxy:

but can't seem to get cloudron to NOT try to do SSL

Cloudron will always do TLS. Have your just tried configuring reverse proxy to do TLS? Atleast in nginx, this is doable. See https://docs.nginx.com/nginx/admin-guide/security-controls/securing-http-traffic-upstream/#complete-example

]]>https://forum.cloudron.io/post/26786https://forum.cloudron.io/post/26786Mon, 01 Mar 2021 16:34:23 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Sun, 28 Feb 2021 21:34:09 GMT]]>have tried pretty much everything i can think of but can't seem to get cloudron to NOT try to do SSL. it's not that big of a deal, just something I was trying to figure out for fun.

]]>https://forum.cloudron.io/post/26742https://forum.cloudron.io/post/26742Sun, 28 Feb 2021 21:34:09 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Fri, 26 Feb 2021 22:52:07 GMT]]>@mehdi this is kind of like that, just with a pretty GUI. https://github.com/jc21/nginx-proxy-manager?utm_source=nginx-proxy-manager

Haven't gotten it to work with CR yet, but I'm getting close!

]]>https://forum.cloudron.io/post/26648https://forum.cloudron.io/post/26648Fri, 26 Feb 2021 22:52:07 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Thu, 18 Feb 2021 22:52:03 GMT]]>@doodlemania2 I think you should just use traefik (or another reverse-proxy that handles Let'sEncrypt stuff by itself), and just disable certs on Cloudron's side. You don't really care about the encryption between the Reverse-Proxy and cloudron, if there are self-signed certs, it shouldn't be an issue (as long as the reverse-proxy is configured to accept it)

]]>https://forum.cloudron.io/post/26130https://forum.cloudron.io/post/26130Thu, 18 Feb 2021 22:52:03 GMT<![CDATA[Reply to Cloudron and Apps Behind a Proxy on Thu, 18 Feb 2021 22:31:58 GMT]]>@doodlemania2 said in Cloudron and Apps Behind a Proxy:

But I don't think I can have a cert in the proxy AND on the Cloudron resolving to same thing?

What do you mean by this? Cert doesn't resolve to anything (or did you mean DNS? even then I am not sure what you are asking...)

But you are on the right path! For Cloudron, choose https proxying.

]]>https://forum.cloudron.io/post/26129https://forum.cloudron.io/post/26129Thu, 18 Feb 2021 22:31:58 GMT