How to install the Ubiquiti UniFi Controller on Debian 9.1

CCWTech

@dbeato
Thought I was okay, but can't log in using http, just https.

It's causing a problem when I try to set the AP's to look to the vultr IP for the controller.

dbeato

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@dbeato
Thought I was okay, but can't log in using http, just https.

It's causing a problem when I try to set the AP's to look to the vultr IP for the controller.

You only login through https, your manually register the APs via port 8080.

dbeato

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@dbeato
Thought I was okay, but can't log in using http, just https.

It's causing a problem when I try to set the AP's to look to the vultr IP for the controller.

set-inform http://ip-of-controller:8080/inform

CCWTech

I SSH'ed into the AP

typed:
mca-cli
set-inform http://xx.xx.xx.xx:8080/inform

Then

info

I get "Unable to resolve (http://unifi:8080/inform)"

CCWTech

Works after FW upgrade.

dbeato

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

Works after FW upgrade.

Strange

FATeknollogee

Question:

At a colo: I have a Cloud Key, I want to "move" the controller (off the CK) to a vm.
I've followed @JaredBusch install guide

What's the proper procedure to make this move in the right order?

JaredBusch

@fateknollogee said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

Question:

At a colo: I have a Cloud Key, I want to "move" the controller (off the CK) to a vm.
I've followed @JaredBusch install guide

What's the proper procedure to make this move in the right order?

Get everything on the same version
Make a backupmfrom the cloud key and download it.
Restore the backup to the VM.

FATeknollogee

@jaredbusch Thx, will give that a go!

FATeknollogee

Thinking out loud here...
This Controller vm is behind a firewall (aka Unifi USG4)...is that a good strategy?

dbeato

@fateknollogee said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

firewall (aka Unifi USG4)...is that a good strategy?

As long as you open the ports needed it should not be an issue.

dbeato

Also take a look at this KB
https://help.ubnt.com/hc/en-us/articles/115002869188-UniFi-Migrating-Sites-with-Site-Export-Wizard

jt1001001

Did this on Vultr last evening worked perfectly. Thanks @JaredBusch for your guide

CCWTech

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

zachary715

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

If you added the repo per this guide, then it should just be (sudo) apt update && (sudo) apt upgrade -y) like any other system update

CCWTech

@zachary715 said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

If you added the repo per this guide, then it should just be (sudo) apt update && (sudo) apt upgrade -y) like any other system update

Ok, thanks.

jt1001001

Had top reinstall the controler today; had to do the following before it would work:

apt install apt-transport-https

JaredBusch

@jt1001001 said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

Had top reinstall the controler today; had to do the following before it would work:
apt install apt-transport-https

Because this is from the repo, I would submit a support email to Ubiqiuiti.

VoIP_n00b

I want to put this behind a nginx reverse proxy. Do you think I could use this?

JaredBusch

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

I want to put this behind a nginx reverse proxy. Do you think I could use this?

My system is behind an Nginx Proxy.
These ports are forward through straight to UniFi

set firewall group port-group UniFi_tcp description 'UniFi Controller TCP Ports'
set firewall group port-group UniFi_tcp port 8080
set firewall group port-group UniFi_tcp port 8081
set firewall group port-group UniFi_tcp port 8880
set firewall group port-group UniFi_tcp port 8843
set firewall group port-group UniFi_tcp port 27117
set firewall group port-group UniFi_udp description 'UniFi Controller UDP Ports'
set firewall group port-group UniFi_udp port 3478

set service nat rule 3 description 'UniFi TCP'
set service nat rule 3 destination address 207.244.223.13
set service nat rule 3 destination group port-group UniFi_tcp
set service nat rule 3 inbound-interface eth2
set service nat rule 3 inside-address address 10.254.0.32
set service nat rule 3 log disable
set service nat rule 3 protocol tcp
set service nat rule 3 type destination
set service nat rule 4 description 'UniFi UDP'
set service nat rule 4 destination address 207.244.223.13
set service nat rule 4 destination group port-group UniFi_udp
set service nat rule 4 inbound-interface eth2
set service nat rule 4 inside-address address 10.254.0.32
set service nat rule 4 log disable
set service nat rule 4 protocol udp
set service nat rule 4 type destination

This has all been setup for so long it is not even funny. I really should redo everything from scratch.

This guide may be from 2017, but the original system was running on a Windows server behind the same proxy, in my colo space, prior to being moved to this.