@Dashrender said in Nginx questions:
@Donahue said in Nginx questions:
telnet cannot connect via 443, but the firewall says it is enabled. I am trying the internal IP first.
If you are trying internally what firewall is blocking you?
Also why are you trying 443? SMTP is port 25.
I turned off windows firewall and still cannot get through. I am trying to telnet 443 into my Nginx VM. The Nginx firewall says 443 is open.
also, Who is a good DNS provider? I am getting tired of waiting for them to respond.
telnet cannot connect via 443, but the firewall says it is enabled. I am trying the internal IP first.
@Donahue said in On-Premises soft PBX:
@Dashrender said in On-Premises soft PBX:
@Donahue said in On-Premises soft PBX:
my phones are on a completely physically separate network.
Why?
It started with a an idea that we should have dual drops at all our offices, back when were just thinking of voip and we needed to redo the wiring anyways. But as it turned out, our phone system is completely isolated from our network, it's not even our equipment except for the cables. Unfortunately, this was before I saw the light and found ML. Now we are contractually obligated to have this terrible expensive phone system for the next 3-1/2 years. I will be switching when that contract is up, and then I can do whatever I want.
inexperience^2
@Dashrender said in On-Premises soft PBX:
@Donahue said in On-Premises soft PBX:
my phones are on a completely physically separate network.
Why?
It started with a an idea that we should have dual drops at all our offices, back when were just thinking of voip and we needed to redo the wiring anyways. But as it turned out, our phone system is completely isolated from our network, it's not even our equipment except for the cables. Unfortunately, this was before I saw the light and found ML. Now we are contractually obligated to have this terrible expensive phone system for the next 3-1/2 years. I will be switching when that contract is up, and then I can do whatever I want.
wow, thats awesome that @Ylian is here. It's a treat when you can interact with the dev
my phones are on a completely physically separate network.
So far, all of that external stuff has been under the "marketing" department, and I have no part of it. It also predates me at this company, probably by a decade. The marketing lady can be a PITA sometimes, so I don't want to step into that fire until I actually have to.
I can tell port 80 is forwarding, If I put in my external ip, I hit the Nginx test page. Can I test https without a cert, or do I have to just wait?
I didn't want to muddy up @JaredBusch's nice how to on Nginx for questions that I have. I am installing it now that I have NC up and going, because I believe that I will have more services at some point and from what I understand, a reverse proxy is just the thing I need for that, if they needed to share the same ports.
At the moment, I am still waiting on my DNS provider so I cannot fully test everything. For the time being, I am looking for a way to see if my firewall ports are actually open, and possibly that they are making it to Nginx. How do I test each hop in the process?
I've got to wait for my DNS provider to put in the record for me, which I am told will be done "sometime today". We will see, but I kinda doubt it.
@scottalanmiller said in Comparing MeshCentral 2 to ScreenConnect:
What you want is what the user's eyeball sees, now what the devices camera sees.
I think you are confused as to what we are talking about. If @manxam is remoting into a phone to view the camera output, the same thing could be achieved by other means if those other means were installed. Facetime or skype, or whatever, can show the camera output too without SC. Now if you needed to see the screen, which is what I would like, then you would need SC.
@scottalanmiller said in Install Nginx as a Reverse Proxy on Fedora 27:
@Donahue said in Install Nginx as a Reverse Proxy on Fedora 27:
I figured out that step. Somehow it only pasted some of the arguments in there. I am still waiting on the DNS A record before I can move on
Why do you need an A record?
I need an external DNS record. Certbot failed because it said it needed an A record.
@scottalanmiller said in Comparing MeshCentral 2 to ScreenConnect:
@Donahue said in Comparing MeshCentral 2 to ScreenConnect:
@manxam said in Comparing MeshCentral 2 to ScreenConnect:
@NashBrydges : You cannot CONTROL an iOS but you can create a view only session where you see the user's screen. In most cases, we setup a support session to an Android or iOS device and have them start their camera and point it where we ask.
Again, as above, you can only CONTROL the screen of a Samsung device via the Connectwise Control Samsung app.
That almost sounds like facetime or equivalent would be easier. Are you just after a way to see what their camera sees?
What the camera sees would be totally different. You'd just see their face or whatever.
you know you can just flip the camera right?
yeah, I would be fine with view access. I am not an MSP, and do not have the same requirements as some of the people here. I am only accessing internal assets, and I dont have any conflicting interests.
@manxam said in Comparing MeshCentral 2 to ScreenConnect:
@NashBrydges : You cannot CONTROL an iOS but you can create a view only session where you see the user's screen. In most cases, we setup a support session to an Android or iOS device and have them start their camera and point it where we ask.
Again, as above, you can only CONTROL the screen of a Samsung device via the Connectwise Control Samsung app.
That almost sounds like facetime or equivalent would be easier. Are you just after a way to see what their camera sees?
@travisdh1 said in Install Nginx as a Reverse Proxy on Fedora 27:
@Donahue said in Install Nginx as a Reverse Proxy on Fedora 27:
@JaredBusch said in Install Nginx as a Reverse Proxy on Fedora 27:
Before you can request your SSL certificate, you have to have a valid configuration file in place listening on port 80.
Nginx stores the configuration files in /etc/nginx/conf.d/, so let's make our nextcloud.conf.
I am not going to go aver all the pieces here. If you want ot know more about what all these settings mean, go look them up.
Finally, this is a sample base don Nextcloud. Change it to fit your application needs.
The structure may look strange at first, but there is a method to my madness. It is based on how certbot --nginx works.cat > /etc/nginx/conf.d/nextcloud.conf <<EOF server { client_max_body_size 40M; server_name nc.domain.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-NginX-Proxy true; proxy_redirect off; location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-NginX-Proxy true; proxy_pass http://10.150.0.17; proxy_redirect off; # Socket.IO Support proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } ## ssl_stapling on; ## ssl_stapling_verify on; ## ssl_session_cache shared:SSL:10m; ## add_header Strict-Transport-Security "max-age=31536000; includeSubdomains"; listen 80; } ##server { ## client_max_body_size 40M; # listen 80; ## server_name nc.domain.com; ## return 301 https://$host$request_uri; ##} EOFNOTE: This is on purpose only one # while the others have two, # listen 80;.
Test the config
nginx -tWhen I run this step, I get an error.
[root@nginx ~]# nginx -t nginx: [emerg] invalid number of arguments in "proxy_set_header" directive in /etc/nginx/conf.d/nextcloud.conf:4 nginx: configuration file /etc/nginx/nginx.conf test failedYou've got the same thing in both the
server {andlocation / {sections. If that's not a copy/paste error, remove them from theserver {section.
that's not mine, that is from @JaredBusch
I figured out that step. Somehow it only pasted some of the arguments in there. I am still waiting on the DNS A record before I can move on
Is that even a thing? Maybe I am just wishing for rainbows and unicorns.