How to install the Ubiquiti UniFi Controller on Debian 9.1

FATeknollogee

Question:

At a colo: I have a Cloud Key, I want to "move" the controller (off the CK) to a vm.
I've followed @JaredBusch install guide

What's the proper procedure to make this move in the right order?

JaredBusch

@fateknollogee said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

Question:

At a colo: I have a Cloud Key, I want to "move" the controller (off the CK) to a vm.
I've followed @JaredBusch install guide

What's the proper procedure to make this move in the right order?

Get everything on the same version
Make a backupmfrom the cloud key and download it.
Restore the backup to the VM.

FATeknollogee

@jaredbusch Thx, will give that a go!

FATeknollogee

Thinking out loud here...
This Controller vm is behind a firewall (aka Unifi USG4)...is that a good strategy?

dbeato

@fateknollogee said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

firewall (aka Unifi USG4)...is that a good strategy?

As long as you open the ports needed it should not be an issue.

dbeato

Also take a look at this KB
https://help.ubnt.com/hc/en-us/articles/115002869188-UniFi-Migrating-Sites-with-Site-Export-Wizard

jt1001001

Did this on Vultr last evening worked perfectly. Thanks @JaredBusch for your guide

CCWTech

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

zachary715

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

If you added the repo per this guide, then it should just be (sudo) apt update && (sudo) apt upgrade -y) like any other system update

CCWTech

@zachary715 said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

To update the Cloud Controller to the latest version on debian, is it just another

apt-get install unifi -y

If you added the repo per this guide, then it should just be (sudo) apt update && (sudo) apt upgrade -y) like any other system update

Ok, thanks.

jt1001001

Had top reinstall the controler today; had to do the following before it would work:

apt install apt-transport-https

JaredBusch

@jt1001001 said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

Had top reinstall the controler today; had to do the following before it would work:
apt install apt-transport-https

Because this is from the repo, I would submit a support email to Ubiqiuiti.

VoIP_n00b

I want to put this behind a nginx reverse proxy. Do you think I could use this?

JaredBusch

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

I want to put this behind a nginx reverse proxy. Do you think I could use this?

My system is behind an Nginx Proxy.
These ports are forward through straight to UniFi

set firewall group port-group UniFi_tcp description 'UniFi Controller TCP Ports'
set firewall group port-group UniFi_tcp port 8080
set firewall group port-group UniFi_tcp port 8081
set firewall group port-group UniFi_tcp port 8880
set firewall group port-group UniFi_tcp port 8843
set firewall group port-group UniFi_tcp port 27117
set firewall group port-group UniFi_udp description 'UniFi Controller UDP Ports'
set firewall group port-group UniFi_udp port 3478

set service nat rule 3 description 'UniFi TCP'
set service nat rule 3 destination address 207.244.223.13
set service nat rule 3 destination group port-group UniFi_tcp
set service nat rule 3 inbound-interface eth2
set service nat rule 3 inside-address address 10.254.0.32
set service nat rule 3 log disable
set service nat rule 3 protocol tcp
set service nat rule 3 type destination
set service nat rule 4 description 'UniFi UDP'
set service nat rule 4 destination address 207.244.223.13
set service nat rule 4 destination group port-group UniFi_udp
set service nat rule 4 inbound-interface eth2
set service nat rule 4 inside-address address 10.254.0.32
set service nat rule 4 log disable
set service nat rule 4 protocol udp
set service nat rule 4 type destination

This has all been setup for so long it is not even funny. I really should redo everything from scratch.

This guide may be from 2017, but the original system was running on a Windows server behind the same proxy, in my colo space, prior to being moved to this.

JaredBusch

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

I want to put this behind a nginx reverse proxy. Do you think I could use this?

Wait. No that guide is for UNMS not UniFi. Those are different solutions with different needs. So I have no idea what UniFi would do with that.

JaredBusch

@VoIP_n00b when I did my original UNMS install I used these options and thus needed nothing special in my Nginx config. ALso I don't want unencrypted connections, so I do not forward anything on 8080.

sudo bash /tmp/unms_install.sh  --behind-reverse-proxy --public-https-port 443 --http-port 8080 --https-port 443

Alex Jones

This post is deleted!

VoIP_n00b

So I got the Unifi Controller working with the same nginx config as the UNMS. Thanks again @JaredBusch

Now how do I get my AP connected to the controller?

dbeato

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

So I got the Unifi Controller working with the same nginx config as the UNMS. Thanks again @JaredBusch

Now how do I get my AP connected to the controller?

Take a look at this
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management#Section_5

Dashrender

@dbeato said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

So I got the Unifi Controller working with the same nginx config as the UNMS. Thanks again @JaredBusch

Now how do I get my AP connected to the controller?

Take a look at this
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management#Section_5

DHCP option 43 - JB and I were just talking about what option was needed for a non UBNT firewall network to provide that to the APs..
thanks.