Nginx questions

Dashrender

@Donahue said in Nginx questions:

telnet cannot connect via 443, but the firewall says it is enabled. I am trying the internal IP first.

If you are trying internally what firewall is blocking you?

Also why are you trying 443? SMTP is port 25.

Aww I see you’re testing https, not smtp

Donahue

@Dashrender said in Nginx questions:

@Donahue said in Nginx questions:

telnet cannot connect via 443, but the firewall says it is enabled. I am trying the internal IP first.

If you are trying internally what firewall is blocking you?

Also why are you trying 443? SMTP is port 25.

I turned off windows firewall and still cannot get through. I am trying to telnet 443 into my Nginx VM. The Nginx firewall says 443 is open.

1337

Use nmap to scan ports to see what is open/closed/blocked.

Donahue

Its working. My DNS updated and externally, its going to https. I am not sure why telnet was not working.

Donahue

I've still got a few loose ends though. I want to set my cert to auto renew, but I dont know quite what to do on this step:

@JaredBusch said in Install Nginx as a Reverse Proxy on Fedora 27:

Don't forget to automate the cert renew
Create a cron job to run the renew everyday. Certbot will not actually do anything if it does not see any certs needing renew within 30 days. So you can run this as often as you want. Cerbot themselves recommends running it twice a day with this.
Use crontab -e to edit your crontab.
0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew 

If I try and run crontab -e, it says:

[root@nginx ~]# crontab -e
-bash: crontab: command not found

Donahue

I am also getting the following error on NC on my iPhone

scottalanmiller

@Donahue any chance you forget the https ?

Donahue

@scottalanmiller said in Nginx questions:

@Donahue any chance you forget the https ?

nope

Donahue

could this be a DNS propagation issue? like wait and see?

scottalanmiller

@Donahue said in Nginx questions:

could this be a DNS propagation issue? like wait and see?

No, because you are clearly seeing the right resolution of the hostname.

Donahue

@Donahue said in Nginx questions:

I've still got a few loose ends though. I want to set my cert to auto renew, but I dont know quite what to do on this step:

@JaredBusch said in Install Nginx as a Reverse Proxy on Fedora 27:
Don't forget to automate the cert renew
Create a cron job to run the renew everyday. Certbot will not actually do anything if it does not see any certs needing renew within 30 days. So you can run this as often as you want. Cerbot themselves recommends running it twice a day with this.
Use crontab -e to edit your crontab.
0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew 
If I try and run crontab -e, it says:
[root@nginx ~]# crontab -e
-bash: crontab: command not found

Ok, I think I got the cron job thing all figured out. I had to install cronie. One question though, I just pasted that into my cron file, and then saved. Is that all I need to do?

Donahue

looks like the NC thing might be a bug with just iOS and using a reverse proxy
https://github.com/nextcloud/server/issues/11464

Donahue

@Donahue said in Nginx questions:

looks like the NC thing might be a bug with just iOS and using a reverse proxy
https://github.com/nextcloud/server/issues/11464

yep, the "old method" indeed did work.