Reverse proxy 3 sub domains

Help
1

Hi,
following the topic
Problem with creating a certificate using DDNS CNAME

I've created a reverse proxy to use another site (hestia) from my Synology NAS (crios) where I get a certificate. But the website is not secure when used

My domain is:
crios@bris.fr (the NAS why the reverse proxy and a certificateĆ 
hestia@bris.fr (the site called from the reverse proxy)

I ran this command:
https://hestia.bris.fr
https://hestia.bris.fr:443

It produced this output:
hestia.bris.fr not secured

My web server is (include version):
crios: Synology 6.2.3
hestia: RPI with Domoticz 2020.2 (don't know much)

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:
on prem

I can login to a root shell on my machine (yes or no, or I don't know):
crios : I'd rather not because all is in the NAS application
hestia: Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
crios: Yes
hestia: no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
?

Questions:
do I need to have a certificate on hestia or the one the NAS is enough?
Do I need to mane hesia in the NAS certificate?

Thanks for your help!

1 Like
2

The certificate(s) need to be on the "proxy" (on the IP that the firewall port forwards 443 to).

You need to name all the domains that will be proxied.
(either all in one cert or one cert for each name - a single cert is simpler)

You will need to install an ACME client (like certbot) to get, and renew, the cert(s) you will need.
I have never seen anyone use a NAS as a proxy, so it may be hard to find any guides online on doing it that way.

[&2* readers: Get involved; Be heard. It starts with: if you read something you like, then like it :heart:]

1 Like
3

Thanks for your reply
I've already set up a certificate on the proxy

You need to name all the domains that will be proxied.
(either all in one cert or one cert for each name - a single cert is simpler)

all in one cert: how to do it ?
For the type being, I've 2 certificates, if needed I could get one more now that I know how to do it.

NAS as a proxy

I've found this tuto Synology: How to Use Reverse Proxy
I've missed the STEP3!
By the end, I've succeeded in making work the reverse proxy and the certificate for https url: I had to configure the certificate to be used by hestia.bris.fr:
Menu Security / Certificate / "select the certificate" / Configure / "for hestia.bris.fr select the right certificate"
So works if I type https but not http. With http the reverse proxy doesn't go the the https for hestia!
If I use the hestia certificate as default on the Synology (crios) it works (But I won't have crios ok!).
Perhaps some header to configure on the reverse proxy for go from http to https

1 Like
4

Within the NAS system... I do not know how.
The link you provided does seem to show how to do that.

[&2* readers: Get involved; Be heard. It starts with: if you read something you like, then like it :heart:]

1 Like
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.