FQDN on private LAN with SSL certs not working. Please help reddit / selfhosted ---------------------------------------------------------------------- Illuminated_Humanoid · 2023-10-19 00:26 Hi friends, I have been trying to sort this out for many days now, and I am stuck on what is most likely a small issue I am overlooking. I have read many guides and previous posts on this, but I still haven't figured it out. I will explain what I have done and hopefully someone can spot the error. Scroll all the way down to read all details. 1. I have my FQDN on Cloudflare. I set its DNS entries, as you can see below, to point to my PUBLIC IP where my stuff is hosted. https://preview.redd.it/8484seuxw1vb1.png?width=1308&format=png&auto=w ebp&s=ae30061796e3cc296116e344283d1fc918757a67 1. Next, I went into Nginx Proxy Manager and clicked add certificate. I got the API token from Cloudflare site and filled it in as you can see below. The certificates are successfully granted. https://preview.redd.it/czhf5g3ux1vb1.png?width=495&format=png&auto=we bp&s=47f48fea68eb315565617da4c9108cc86befde53 1. Next, I added a reverse proxy entry in Nginx. I want this entry to point to my NAS homepage, so I set it, as you can see below. I also applied and forced SSL that was issued. https://preview.redd.it/46pcp0h8y1vb1.png?width=496&format=png&auto=we bp&s=5fbba6cc0cc8d1e424ec49e733fea51952e8eaf9 https://preview.redd.it/um8wtfbiy1vb1.png?width=498&format=png&auto=we bp&s=16d77305e91dbf98c22f87b99df2f46ffe39fe82 Now, I would expect after this step that I could just go into my browser and type the FQDN, and it will route me to the LAN IP I set the proxy entry to, but it's not working. Keeps taking me to a "this page cannot be found" . What am I missing here? Important notes: \- I have adguard home with Unbound setup in my network on a separate Raspberry Pi. \- I use tailscale on all my devices. \- My home router and my NAS are both firewalled. \- My self-hosted containers are all in docker on my Synology NAS (minus adguard) ---------------------------------------------------------------------- NikStalwart · 2023-10-19 00:54 > Now, I would expect after this step that I could just go into my browser and type the FQDN, and it will route me to the LAN IP I set the proxy entry to, but it's not working. Keeps taking me to a "this page cannot be found" . And *why* would you think that? Your A Record points to your WAN IP. How would your computer know to hit your LAN IP? Also, if you are using "tailscale on all devices", you should be aware that tailscale uses the 100.64.0.0/10 range, which, naturally, is different to both your LAN and WAN. The things I recommend doing: * Get rid of Nginx Proxy Manager  —  web UIs make you lazy and abstract too many functions to the point where you do not understand what you are doing and why it works (or does not work) * Stop following youtube guides. Youtube guides are inherently crap because the people making them are making *content* for youtube, not *information*. Follow text guides. Don't follow rando mpeople's blogs on medium. DigitalOcean has a large chunk of basic linux tutorials, so do many other hosting providers. There is also stackoverflow and the *.stackexchange.com sites. * Map out your network. A diagram might help. * Understand what connects to what and routes to what. * Start with the fewest number of moving parts — I recommend started with webserver only, and only *then* adding VPNs, tunnels and etc when you get the basics working. Good luck. ---------------------------------------------------------------------- SadMaverick · 2023-10-19 01:07 I agree with following youtube videos. I started off with those as they were easier to swallow. But realized they do kind of happy path and hide away the basics/murky stuff. Only so much you can fit into a video without boring your audience. Some videos are still decent though.