Super Simple Cloudflare and Nginx Proxy Manager Setup Using YOUR Domain

Подписаться 15 тыс.

Просмотров 125 тыс.

50% 1

You want to expose your self-hosted services but want to do it securely using your own domain? Start with the basic Cloudflare and Nginx Proxy Manager options and see just how easy it is to setup! Don’t forget to forward ports 80 and 443 to the IP of the machine your Nginx Proxy Manager is on. Do this in your router or gateway. Find the IP by opening a terminal and type “ifconfig”. If that doesn’t work install net tools by typing “sudo apt install net-tools” then run the ifconfig command again.
Written guide
thehomelab.wiki/books/dns-rev...
👍 Subscribe!
ru-vid.com?su...
❤️If you want to make a monetary donation. Thank you!
ko-fi.com/geeked
💬 Join us on Discord
/ discord
Tags used in this video:
2020, synology domain, setup synology with reverse proxy, synology, cloudflare, synology and cloudflare, networking, selfhosting, self-hosted, self hosting, geeked, homelab, geekedtv, grablab, install nginx proxy manager, using cloudflare with your domain

Опубликовано:

18 авг 2020

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 202

@selfhosted 3 года назад

Don’t forget to forward ports 80 and 443 to the IP of the machine your Nginx Proxy Manager is on. Do this in your router or gateway. Find the IP by opening a terminal and type “ifconfig”. If that doesn’t work install net tools by typing “sudo apt install net-tools” then run the ifconfig command again. You can also use the ip addr command.

@TheMentalFlakes 3 года назад

When it comes time for the automatic Let's Encrypt cert renewal, will I have to turn the Cloudflare proxy back off for it to renew? Or it will renew on its own?

@condor13 3 года назад

Man hot did i forget that! Thanks!!! was struggling for hours to get https working!

@vicwilliams9731 2 года назад

When i forward the ports. and click on my domain name. It just takes me to the login page of the nginx proxy manager

@DangerRangerThings 2 года назад

Hi there. I'm wanting to follow your written guide, but it looks like your site is down?

@rc_brotherz Год назад

LOL I was wondering why my subdomain kept taking me to my router login!! Hah! May want to add this as one of those info cards on the video.

@Elmojomo 2 года назад

You just earned a sub for the ONE detail you included that no one else has mentioned: turning off the Cloudflare proxy temporarily until after adding the SSL!! I've been struggling with this for literally weeks. That one little thing suddenly made my setup work...thank you so much!

@selfhosted 2 года назад

I’ve had quite a few people tell me this. Good to hear my video helped you and thanks for watching!

@ijaricool 8 месяцев назад

hey, do you know why right now you dont have to do that actually? when proxy is enabled i can still make a certificate in nginx ?@@selfhosted

@lorddias 6 месяцев назад

I know its been a couple of years now but thanks a ton for this video! I was so lost trying to complete setup and I was constantly making things more complicated than they needed to be. I gave it an honest try but your video did the job, thank you.

@calmik 3 года назад

please don’t apologise for making either long videos or for being slightly not “orderly”... your videos are super informative, to the point, no nonsense, very clear, concise and high quality. I found your channel by pure coincidence this week, watched a few videos and subscribed. love your content, please don’t change unless you run out of ideas 😊 as an “early” RU-vidr, your vidz are awesome, so thanks for your high quality content. keep it up and keep it coming 😊

@selfhosted 3 года назад

oiuyh oh that means a lot! Thank you!

@JonathanRLap 2 года назад

i would just yell "Amen!" to this comment! i also found this channel by rondom luck and i like the fact that it's very clear and no nonsense indeed. I also don't mind being taken by your thought process as any IT-related person would because we all think like that.

@MHM4V3R1CK Год назад

@@selfhosted agree completely! Thanks man!

@faba002 3 года назад

Finally someone who explains it correctly for a starter. Great video !

@PeterBatah 2 года назад

Thank you for sharing your time and expertise with us. Your delivery was clear and precise. No apology necessary. Much appreciated.

@bernieyee 3 года назад

Thank you much! I followed your video today and got my Plex server online now! Most of my time has been spend on "Don’t forget to forward ports 80 and 443 to the IP of the machine your Nginx Proxy Manager is on. " I wish that I read the description before watching the video! LOL! Anyway, great video and please keep going!!!

@t_Radikl 3 года назад

Really loving your content! Very well explained. Keep up the great content and I’ll keep smashing that like button!

@boomuhjuice6299 4 месяца назад

A million thumbs up, this is the 5th tutorial I've watched on setting up NGINX, the first one I got to work And I only needed to watch a single time,

@larrybahr489 3 года назад

This was a great and quick video. Exactly what I wanted to know!

@joftenly 3 года назад

Hey thanks! I broke a lot doing this tutorial, I learned how to fix more stuff and I got the original thing done using this tutorial lol! Thanks for the quality vid!!

@andreloureiro8127 2 года назад

Not going to lie, im trying to learn some stuff before I start tinkering on my machine and this video is by far the most comprehensive of all of the ones i saw

@jamesvdos3875 3 года назад

Awesome tutorial! keep up the amazing work!

@geraldmaale 3 года назад

Wasted almost 12hours in getting around this hack. You are a life saver. The port mappings were tricky for me. I went around almost all options except what you demonstrated. Cheers! 👌👌🤞🤞

@selfhosted 3 года назад

Glad it helped! Thanks for sharing your feedback!

@piersolenski4145 3 года назад

Thanks, this was super helpful!

@ZacharyGuerrero 3 года назад

Thanks this is awesome! I wish I knew about Nginx Proxy Manager before. using that will make managing all my proxy servers so much easier vs manually editing each one.

@patrickmoon4090 Год назад

Thank you for your kind explaination! I got it finally!

@kevinhughes9801 3 года назад

Great vid thanks for doing this

@kevinmeza Год назад

Thank you so much this helped!

@KevinMarchese 3 года назад

9:32 omg 😳 these are the little things people fail to tell the tale of on why. Thank you extremely helpful.

@stevebaros 2 года назад

Thank you , this is a life saver

@LonSeidman 3 года назад

This was a super helpful and simple guide. I did an experiment where I booted up the NPM docker on an Unbuntu VM running on my Synology NAS' virtual machine manager and then passed traffic to an OwnCloud docker running on the Synology as well. The VM got its own IP (similar to how it would work with Proxmox) and I did not experience any collisions with the Synology port 80 and 443 issue. The only thing I ran into with that configuration was that the Owncloud docker image did not have SSL configured so I used cloudflare's SSL instead. Seems to work and the cert is valid.

@selfhosted 3 года назад

Lon.TV sounds right! As long as you’re not hosting NPM on synology root. The VM makes sense! Happy to have your input!

@huntermcclovio4517 3 года назад

wow! you got input from Lon.TV!! how cool is that! I am subscribed to both of you guys' channel good stuff!!

@huntermcclovio4517 3 года назад

@Harlem Wilder uh yeah, we don't give a shit! F- off

@HowToITLLC 2 года назад

I loved this! Thank you! I am getting a 502 error but that means it is my set up officially this video helped me troubleshoot a lot, thank you.

@RuneW0lf 3 года назад

Well. thanks to you i now have subdomains setup and working beautifully, thankyou for the amazing tutorial!

@selfhosted 3 года назад

Rune W0lf Awesome! Glad to hear!

@GluttonyGamingChannel 2 года назад

you may not have a ton of subscribers yet but with the way you present you will. thanks for the great video

@DamnJuhl 3 года назад

Very helpful!

@gouthamshiv 3 года назад

It was really great sir 👍🏻

@RobinGiel 3 года назад

this video introduces me to nginx proxy manager :-) thank you

@FunkShoi 2 года назад

thanks for making a video for the rest of us!

@selfhosted 2 года назад

No worries!

@euf0ria 3 года назад

Great walktrough! Have you considered making more of these videos and have a deeper look into the rest of the settings in both cloudflare and NPM?

@eduardoalmontemieses4842 3 года назад

Thanks for answering my last question and thanks for this whole video on the subject. Love the channel and content. Going with a RPI to try this out 🤙🏽

@selfhosted 3 года назад

Eduardo Almonte Mieses my good buddy DBTech has a great video for installing NPM on rpi. ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-2oi4IQF7VnE.html

@eduardoalmontemieses4842 3 года назад

@@selfhosted Up and running! Huge thank you!

@selfhosted 3 года назад

@@eduardoalmontemieses4842 Awesome! good to hear!

@eduardoalmontemieses4842 3 года назад

@@selfhosted Wondering if I now use a domain such as nas.mydomain.com via Nginx to load up DSM, can now use that domain to use services such as Hyper Backup that require ports such as 6281 from a remote NAS, or am I stuck using home IP + opening ports.

@officialismailshah Год назад

❤️❤️❤️ respect Sir it was awesome and full of knowledge...

@NickKarpen 4 месяца назад

Great Explanation! New to home lab and just stumbled across your channel. Bummed to see that you are not creating many new videos.

@SrFrancia0 2 года назад

Great video, thanks. I would suggest you zoom webpages as much as you can so future "tutorials" like this are watchable on smaller screens or smaller windows so we can follow steps while watching

@waichan2613 3 года назад

Thanks for your effort. Can I substitute truenas for snology nas in this case ?

@RK-ly5qj 3 года назад

That music is enjoying ^^

@Luke-cb7hi 3 года назад

3 month ago I tried to setup cloudflare but without success, now I get why. Thanks a lot I will try again with your tutorial in mind !

@selfhosted 3 года назад

Sandro Man Let me know how it goes!

@Luke-cb7hi 3 года назад

@@selfhosted unfortunately nginx didn't work because I use a raspberry as my selfhost machine, but cloudflare did ! Thanks again

@selfhosted 3 года назад

Sandro Man ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-2oi4IQF7VnE.html

@Luke-cb7hi 3 года назад

@@selfhosted uhh, thanks

@xiaxiao7567 3 года назад

Very clear thanks! a lot! one question can you use the nginx proxy manger as an load balancer or?

@Eriksonlove69 2 года назад

Very good tutorial, nice work

@selfhosted 2 года назад

Thank you! Cheers!

@jig1056 3 года назад

Nice video, thanks. So you mentioned that I need for turn off proxy in cloud flare before setting up the cert in nginx proxy manager. I’ve not done this and it seems to work fine. every once in a while I’ll get an error in nginx advising of an internal error when adding the cert but i try it again and it works fine. I didn’t know that they proxy should be off, what is the impact of of having proxy on when creating cloudflare entry?

@DrummClem 2 года назад

Hello there. That tutorial is extremely clear and staightforward ! Thanks to you I was able to get the certificate ! Unfortunately, I still can't access my NAS (Nextcloud) and I'm probably still missing something but can't figure out what...

@Rokegle135 2 года назад

Honestly super detailed video and incredibly helpful sadly I can't make a ssl certifcate for whatever reason but still great video

@gabscar1 5 месяцев назад

Nice video. Not sure about the super simple bit, though. Thanks!

@MrEric377 3 года назад

I just found your video, Thank you I was always missing the whole "how to setup external domain". My question is once I set this up can I use this internally as well? So Pihole(Local DNS provider) would direct traffic to cloudflare DNS which would give my ISP's IP and back inside my network. I guess I could just try it and see if it works.

@eliluong 3 года назад

thanks, helped figure out the issue why nginx proxy manager was not getting SSL cert behind cloudflare!

@SeanAnthony 3 года назад

Great tutorials. I'm trying to following your NPM video, however I need to get docker running on a Ubuntu server. I'm using Proxmox and trying to place docker in LXC running Ubuntu. I'm getting all sorts of error that docker-ce has failed to load. I followed other videos that say it should work but I can't seem to get it working. I tried 20.4 and 18.04 and get the same error. Should I hang up trying to use the LXC and attempt the setup in Proxmox VM? Thanks for these tutorials they are helping me slowly get my Homelab up and running.

@belizejackie 3 года назад

i kept getting 502 Bad Gateway on my vps .. try to forward docker container

@shaunpx1 3 года назад

Awesome guide! do you know how we could switch from using Mysql to Mongo DB or Couch DB NoSQL data base?

@byrk0ff 2 года назад

Hello, will this option work when my ISP assigns multiple users to one IP?

@ScheveninGaming 3 года назад

How were you able to configure your sites with access lists to read your actual ip and not the proxied ip that cloudflare has you connecting as? When I put an access list on a site that only allows my public ip, I am still unable to access the site because of the cloudflare proxy making my ip appear as one of cloudflares many ips. I guess I am also asking if you proxy the sites which you have an access list on. How are you getting nginx pm to recognize your IP when you try to connect to your site behind cloudflare proxies?

@brbbst 11 месяцев назад

Would be possible to give your hdd a new identity (virtualise it) and use it from outside (proxmox/docker)?

@netto_info Год назад

I was curious to know which distribution you use on the desktop.

@auronarcher 3 года назад

When attempting to make the SSL cert at the 11minute mark I keep getting an error saying it is already in use????? Where did I go wrong?

@zandadoum 8 месяцев назад

Heya, about Synology: while you're right that :80 and :443 are reserved on the Synology and a real hassle to change, if you're behind a ISP router, you can just redirect :80 and :443 on your router to something else. And run NPM in docker on your Synology. About snapshots: that's also possible on your Synology with snapshot replication. Just target your \volume1\docker folder and restore if needed.

@andrewa3216 Год назад

This stuff hurts my brain so much. So, does cloudflare work hand in hand with the ssl cert you get from letsencrypt? I assume there are now 2 certs? one for cloudfare and one for nginx?

@PCMagikHomeLab 2 года назад

why NginX Proxy Manager works with apps in docker (in same docker where is npm)? with other servers still i need to put ports with domain name? (servers are other VMs with diffrent ip address) can You explain me that? what im doing wrong?

@OzDeaDMeaT 2 года назад

I keep getting a 502 error. I am hosting this docker container on the same system that i am trying to proxy. Would that cause an issue?

@bp-1995 10 месяцев назад

so I'm running nginx on a home assistant VM in proxmox, but when I go to the subdomains I create it just takes me to the login page of nginx, any suggestions?

@chrisbuckley9343 2 года назад

I used this guide to loosely finish up my Jellyfin install, but when I try to connect via a subdomain, I get a 504 error (gateway time-out). I had no A recoed for www, but I've added it. Should the content be my public IP? Any help would be appreciated.

@sturdza7092 3 года назад

I've been trying to get dsm working behind npm for a few days and no success, every time i get error 502, however for anything but dsm it works great. Does anyone have any idea what the problem might be?

@Breeegz 2 года назад

I couldn't find the written guide.. It looks like you migrated to "noted" did you omit this one for a reason, or will it show back up in the future?

@DjLundbladh 2 года назад

under "Improve security"i only have "Automatic HTTPS Rewrites" i have no options to set to full. Or is it the same thing? :)

@jumpieva 6 месяцев назад

how about using the CF cert for your domain when you do NOT want to expose anything to the internet? I just want trusted certs on all my internal devices and not rely on self signed. I tried to generate an origin cert and upload to NPM, and using a private IP DNS record. Workflow wise this works, but my browser doesn't like it, I probably messed something up. Is there any way to accomplish this (I'm not even a fan of the tunnel option for just myself), without having to setup my whole CA in house?

@alanjrobertson 2 года назад

Interesting vid - why the added complexity of Cloudflare and Docker though? Why not just install direct on the Linux box?

@JirkaLottmann 3 года назад

when i change DNS only to proxited, then stop working site in cname. Any help please?

@LetMattEntertainYou Год назад

Everything was going great except I get an "Internal Error" in NGINX when trying to save with a Let's Encrypt certificate. Any ideas?

@henslyyung6221 2 года назад

Great Video. While recording use a lower resolution setting for your screen or you will need to edit and focus on smaller windows so we can read properly. Thanks keep it up. Subscribed.

@oyk99999 3 года назад

how do you do this passbolt?

@abdoulouhichi4946 11 месяцев назад

is it possible to do this senario using linode vps brother !?

@escanor3394 3 года назад

Thanks for the video it's extremely helpful and I was able to get my setup working. I'm rather new to web security so I don't quite understand why it's necessary to have Let'sEncrypt and cloudflare both supplying certificate security. Couldn't Cloudflare do it alone? or couldn't Let'sEncrypt do it alone? Still wrapping my head around the role each component plays. In any case I appreciate the video!

@escanor3394 3 года назад

Also I was a bit surprised when I did docker-compose down and all my data got erased. Guess I need to make the volumes external?

@jamesstones9827 3 года назад

Hey! Just tried this, but when i connect the orange proxy in Cloudflare, this stops working. I opened the 80,443 ports, and the 2000 port thats redirecting to my service. dont know where it might went wrong. Any help?

@4Abaddon4 3 года назад

Thank you so much for your mentioning at 9:52 why my Proxy manager SSL cert assigning wouldn't work. It could not see the wan IP because of Cloudflare proxy ... man I feel dumb

@robersniper Год назад

So I cant use a proxied cloudflare record?

@irwige Год назад

No matter how many times I do this, as soon as I turn on Proxy it stops working?

@Mick_C Год назад

hello, i tried, follow all the step but it does'nt work. Always a 522 error. Don't understand why.

@pascalh5870 Год назад

it's also a good advice to run a fail2ban docker container which allows cloudflare to block rouge like IP's for enhanced protection of your services

@kissp79 2 года назад

is there a link to the text that needs to be copied? And where to copy it?

@korten88 Год назад

Great video! I ran into the same problem with the Cloudflare proxy needing to be disabled for the certs to get provisioned. One question though, does the enabling of proxy in Cloudflare DNS prevent the certs from being renewed? Any feedback will be appreciated :)

@MarcodeBock Год назад

I have the same question. If I would guess, I assume the renewal won’t work in this way.

@jaygreentree4394 Год назад

With nginx proxy manager you can even have it connect to your cloudflare account to create dns records for you so you dont have to do both manually.

Год назад

after adding the domain to cloudflare in this way and redirecting the service via ngiex proxy manager, I keep getting error Origin is unreachable Error code 523 I will add that the domain is correctly redirected to cloudflare servers thunk you help:)

@ahmedaborady7883 11 месяцев назад

Problem i found with cloudflare after following all the steps and it all worked perfectly but cloudflare has kind of a limit 100mb so if u login to the synology nas on synology photos it'll login but if you try to upload a videos thats bigger than 100mb u'll get an error and it wont upload I've followed same steps using wix domain i have and mobile upload worked again

@OzDeaDMeaT 2 года назад

What is the difference between your nginx and the standard nginx container?

@godmode8687 3 года назад

I dont know what i did wrong... It just doesnt work. Im close to giving up :/ I reach the NGINX default site. When i then setup the proxy host in NGINX it says connection refused/rejected whatever, i dont know how it is translated. Anyone an idea?

@nissimalbilia 3 года назад

Thanks for the guide :) Do I need to enter in cloudflare DNS management the external IP address of the synology, or the local address of the nas?

@_obscuritas_ Год назад

Did you find it out?

@RaduRadonys Месяц назад

@@_obscuritas_ External IP if you want the NAS to be accessible from the internet, or internal one if you just want local access. Internal local access will require a Cloudflare token to get the Let's Encrypt certificates though.

@Nonilolsis 2 года назад

Hi thanks for the video, but a couple of questions arose: - If you request a lets encrypt cert with npm and turn on the proxy mode afterwards on cloudflare, will the automatic cert renew work properly? - After enabling the proxy mode and visiting the domain for which you created an A record, which certificate is used the cloudflare one or the lets encrypt one? If the cloudflare one is used anyway (due to proxyied mode) why bother with lets encrypt?

@selfhosted 2 года назад

Yes it will.

@wraithxxiv 3 года назад

Great video! I followed along and everything seems to function, as in pages load. I was able to get the SSL cert to generate, cloudflare set to full and my A record is set to proxied. I chose to expose Seafile. I still get the "Your connection to this site isn't fully secure" error. Any suggestions?

@wraithxxiv 3 года назад

Just in case someone else stumbles across this same issue I resolved it with help from this forum. forum.seafile.com/t/private-seafile-page-connection-is-not-fully-secure-with-https-enabled/11826/3

@phil2of3 2 года назад

Came here because my ssl certificate was failing, who knew you had to temporally toggle the proxy status to make it work.

@madsnygaard8354 3 года назад

Can you highlight specific benefits from using NGINX proxy manager via docker vs using the built-in DSM Proxy management if any? I do like the GUI of the NGINX proxy panel but I'd also like to avoid installation bloat in case it's not needed. Thanks :-)

@kratoz29 3 года назад

I tried to use NPM after using the DSM reverse Proxy but it didn't let me use the ports, maybe it's because they are being used by Synology services, I don't know, I'm sticking with DSM reverse proxy for now.

@mysteryliner Год назад

Using all broadcasted services from synology, they each punch a hole in your firewall, And you're declaring to the world that you're hosting a synology server. So if there is a security exploit with synology, malicious parties will just try it on any synology service that's in the open. NPM, acts as the front desk and only opens 2 ports. It transfers you do whatever department without the need for an extra hole to get there

@MrAndroid2013 3 года назад

What if I wanted to change the ports from 5:39 AFTER it's already been configured? I can't seem to find the .conf file within docker.

@selfhosted 3 года назад

You can just change them in the command and rerun it. As long as your files are there it will use the new ports and then go into your router and change them accordingly.

@bigups43 Год назад

Just FYI you can do the cert in NGINX proxy manager with CloudFlare proxy enabled.

@fbifido2 3 года назад

@13:20 - this "Proxied" mode, does it work when you need to renew your certificates ???

@okseby 2 года назад

That's what I'm wondering

@okanerdem 2 года назад

Why not CNAME ? You added as A what's different?

@SeanAnthony 3 года назад

Another question I'm getting internal error with NPM when requesting a cert from LetsinEncrypt. Do I need to open ports on my home router?

@selfhosted 3 года назад

No! You need to make sure the cloudflare protection is disabled before requesting certs then enable it when it's done.

@voiceoftreason1760 2 года назад

doesn't enabling the cloudflare proxy again on the A record make it impossible for the acme client to renew your ssl certificate?

@selfhosted 2 года назад

For some reason it doesn’t. Not in my experience.

@GrishTech 3 года назад

nginx proxy manager vs traefik Which do you prefer or is better? I heard that traefik can easily and seamlessly tie into a k8's cluster.

@selfhosted 3 года назад

Traefik is unnecessary. It’s not bad but I think it’s way overdone for what it does.

@karmaspcs 2 месяца назад

6:04 not working. error all over the place. there is a very importand step missing.

@faisalali793 3 года назад

Very informative video. If you could zoom in on the content a little bit that would be perfect.

@selfhosted 3 года назад

I'll keep that in mind. Thanks for watching!

@morrocoyo1671 3 года назад

I'm almost there! But as soon as I enable "Force SSL" I'm hit with a "redirected you too many times. Try clearing your cookies. ERR_TOO_MANY_REDIRECTS" Anyone know what could be the going on, or if force SSL is needed?

@selfhosted 3 года назад

Morrocoyo if the port on nginx is already a secure port, no need for https scheme.

@TheAlCowlings 3 года назад

9:08 So what do I do if I'm behind carrier-grade NAT? (the IP my ISP tells me I have is different from the one the rest of the internet actually sees)

@brettmatthews9886 3 года назад

Get new internet with a public address

@tomgrey3046 3 года назад

@@brettmatthews9886 funny and helpful man, there is plenty of "tinkrered", copy-pasted stuff how to manage domains and proxies using port forwarding, but no practical guides how to bypass CGNAT with cloudflare, ngnix, docker, pi's, syno's or any other stuff. Tunnelling is one of the methods, even on synology...