hassio配置SSL及反向代理最简单的方法：Nginx Proxy Manager

jyz_0501

咸味土豆 发表于 2019-4-18 20:32
全站SSL啊，本来是为了侧边栏的SSL访问，更确切的说是全局域网SSL。

我也发现 貌似docker下的ssl会成为全局域网的ssl

jyz_0501

咸味土豆 发表于 2019-4-21 14:42
有外网环境和域名的话（本贴使用环境），用这个也很简单啊：

https://bbs.hassbian.com/thread-4758-1-1 ...

我也用的这个

z741554038

请问土豆大，登陆不上，说是

错误的网关

log如下

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] permissions: applying... 
[fix-attrs.d] permissions: exited 0.
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-banner.sh: executing... 

-----------------------------------------------------------
 Add-on: Nginx Proxy Manager
 Manage Nginx proxy hosts with a simple, powerful interface
-----------------------------------------------------------
 Add-on version: 0.5.0
 You are running the latest version of this add-on.
 System: Raspbian GNU/Linux 10 (buster)  (armv7 / raspberrypi3)
 Home Assistant Core: 0.107.3
 Home Assistant Supervisor: 209
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums or the Discord chat.
-----------------------------------------------------------
[cont-init.d] 00-banner.sh: exited 0.
[cont-init.d] 01-log-level.sh: executing... 
Log level is set to INFO
[cont-init.d] 01-log-level.sh: exited 0.
[cont-init.d] mysql.sh: executing... 
[cont-init.d] mysql.sh: exited 0.
[cont-init.d] nginx.sh: executing... 
[cont-init.d] nginx.sh: exited 0.
[cont-init.d] npm.sh: executing... 
[14:50:19] INFO: Generating dummy SSL certificate
Generating a RSA private key
....+++++
......+++++
writing new private key to '/data/nginx/dummykey.pem'
-----
[cont-init.d] npm.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
[14:50:23] INFO: Starting the Manager...
[14:50:23] INFO: Starting NGinx...
[3/22/2020] [2:50:37 PM] [Migrate  ] › ℹ  info      Current database version: 20190227065017
[3/22/2020] [2:50:37 PM] [Setup    ] › ℹ  info      Creating a new JWT key pair...
2020/03/22 14:51:38 [error] 573#573: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "GET /api/ HTTP/1.1", upstream: "http://127.0.0.1:3000/", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/"
2020/03/22 14:51:45 [error] 573#573: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "POST /api/tokens HTTP/1.1", upstream: "http://127.0.0.1:3000/tokens", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/login"
2020/03/22 14:51:46 [error] 573#573: *2 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "POST /api/tokens HTTP/1.1", upstream: "http://127.0.0.1:3000/tokens", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/login"
[3/22/2020] [2:52:50 PM] [Setup    ] › ℹ  info      Wrote JWT key pair to config file: /opt/nginx-proxy-manager/config/production.json
[3/22/2020] [2:52:50 PM] [Setup    ] › ⚠  warning   Restarting interface to apply new configuration
[14:52:50] INFO: Starting the Manager...
[3/22/2020] [2:53:02 PM] [Migrate  ] › ℹ  info      Current database version: 20190227065017
[3/22/2020] [2:53:02 PM] [IP Ranges] › ℹ  info      Fetching IP Ranges from online services...
[3/22/2020] [2:53:02 PM] [IP Ranges] › ℹ  info      Fetching https://ip-ranges.amazonaws.com/ip-ranges.json
2020/03/22 14:57:49 [error] 572#572: *6 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "POST /api/tokens HTTP/1.1", upstream: "http://127.0.0.1:3000/tokens", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/login"
2020/03/22 14:57:50 [error] 572#572: *6 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "POST /api/tokens HTTP/1.1", upstream: "http://127.0.0.1:3000/tokens", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/login"
2020/03/22 14:58:14 [error] 572#572: *6 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.123.81, server: nginxproxymanager, request: "POST /api/tokens HTTP/1.1", upstream: "http://127.0.0.1:3000/tokens", host: "192.168.123.238:8190", referrer: "http://192.168.123.238:8190/login"

复制代码

请问如何解决

learning

咸味土豆 发表于 2020-2-11 18:59
我的tr和emby都没有问题啊，可能跟软件本身设置有关系？不明。。。你得自己琢磨或者等大佬解答，我其实就 ...

找到问题了，老版本的nginx对websockets支持有问题，关掉就好了。现在这个版本已经没有问题了

猩猩点灯

大佬们， https 浏览器还是提示不安全是什么原因啊？SSL没有配置好吗？

咸味土豆

z741554038 发表于 2020-3-22 15:00
请问土豆大，登陆不上，说是
log如下
请问如何解决

你尝试排除一下数据库问题，我上次遇到这个，然后把mariadb里面以前创建的ngm的数据库删除重新启动插件就可以了。

engineerlzk

谢谢楼主分享，但这样如何实现ssl证书自动更新啊？谢谢指教！

huacius

二、插件安装及配置：

1、安装插件：

见官方自带的插件库：



官方自带插件库是啥，怎么找到这个入口？

kfy2003

要是想拿这个反向代理calibre-web该怎样配置呢？貌似简单直接配上并不行

咸味土豆

kfy2003 发表于 2020-10-30 17:13
要是想拿这个反向代理calibre-web该怎样配置呢？貌似简单直接配上并不行

它是不支持http么？按道理应该也可以啊，强制要求https的有些服务的web没法简单的配置（复杂的我也不会），calibre-web版本也好多，这个真是没玩过没有发言权，我也想建个趁手的calibre-web服务端，好像没有很合适的，又好看又方便的。