Still waiting on the pfsense tutorial to automatically transfer from the unraid vm to a bare metal box in case of downed server. Great video as usual! I always look forward to all your videos.
Would love to see a updated video on how we could utilize nginx proxy manager with next cloud, seafile and others. nginx proxy manager seems really amazing, but as a novice, would love to see a video on it.
I was one of the people that commented on your LetsEncrypt video because I had an issue. Almost positive my ISP is blocking port 80 but they won't confirm it. I'm gonna try this soon. Thanks!
I see in this video you have Let's Encrypt Network type set as Bridge and not Proxynet like your last video. Is this a change that needs to happen? If so what other changes need to happen?
Thanks again for another to-the-point technical video! Was beating my head over letsencrypt subdomain credential creation, and this video did the trick.
Could you do a video on TXT record for the domain root that would be needed by your domain to add dns record? Using cloudflare completely messed up my domain for about a week!
Thank you! another great video to the rescue. Ultimatley I found out my ISP has a switch to turn port 80 on and off on thier website. Ugh! Hopefully this info will help someone.
Would be great to see this integrated with the new Swag update, but I managed to figure in the changes and can FINALLY access my nextcloud! Many thanks!!!
Any reason not to use the "proxynet" setting in docker container you previously mentioned? Also, I would love a future video explaining editing out configs to point to subdomains, I still find that confusing as my goal is to limit my ports that are exposed. Thanks again, can't wait to go try this out.
Not sure you want to use that global API key instead of the CA API key. The global key also allows for changes to be made to your cloudflare domains while the CA key is only used for certs.
Please help me! An unexpected error occurred: KeyError: 'code' Please see the logfiles in /var/log/letsencrypt for more details. ERROR: Cert does not exist! Please see the validation error above. Make sure you entered correct credentials into the /config/dns-conf/cloudflare.ini file.
Very nice video indeed as always! I do think you are missing out on saying that it's important to turn off the HTTP proxy function and use "only DNS", when creating a cname. I know that you are turning it off in the video, but to a new guy trying to get it to work it could be a source to a lot of frustration if he didn't notice and leaves it on.
can you explain why one can't let it run through the orange-cloud. i agree, as it doesn't work when i try, but i'd like to understand the reasons better. thanks!
@@pimogo Yes of course and sorry for late response. The reason for it not working is because it's a http proxy and as they say themselves "While CloudFlare can resolve DNS for all of your subdomains, CloudFlare can only proxy domains that would be considered web traffic (www, blog, etc.). Subdomains like ftp, mail should be marked with a gray cloud. You can find the entire list of what should be marked with a gray cloud here." There is a huge list of services which are not able to use the feature (goo.gl/W8uzGK) and between these is SSL (which makes sense as it is an http proxy), and as we use ssl on port 443 to connect to the proxy server it is kind of pointless to try and use an http proxy first. Hope this answers your question :) Otherwise feel free to message me or reply again
Love your videos, always super helpful. But why did you point the sonarr sub domain to duckdns in cloudflare? If one had their own domain with a different provider, and had set up several sub domains, would each one need to be added here?
Great video. It worked for me. Do you have any idea if letsencrypt will auto-update my cert in 3 months? I had to change pfsense setting before, so this is an unknown for me.
Just one thing I can't figure out. I understand the cert expires every 90 days, and I have seen information about automating it. Is it as easy as restarting the letsencrypt container when I need to update the cert(s)? Or do I need to dive into scripting a certbot renew? Thanks
Does changing my nameservers to cloudflare affect by DDNS setup? Specifically, does this change make me use cloudlfare for managing my domain, or is is business as usual (my current DDNS scripts continue working)? Would like to know be something breaks.
Awesome! got it working, I'm trying to make oAuth2 to work with google but keeps returning named cookie not present, can you make a video showing hot to implement it, this will increase security up a notch. Thanks
I get this message at the end of the log for let's encrypt container: "nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)" Should I do anything about it?
I feel like I'm so close, but this seems like an error I can't ignore. nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html) nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
what about the changes you made at 5:28? 7:35 shows the letsencrypt log file. "unsafe permissions on credentials configuration file: /config/dns-conf/cloudflare.ini" do we need to undo the permisson changes?
just change it back to what it was before with chmod 755 -R /mnt/user/appdata/swag/dns-conf I don't like setting open folders with world write permissions
Off course it does, otherwise how will you reach your server from outside over HTTPS. You can delete the 80 port forward though as LetsEncrypt will no longer use that
Is there any way you could make a new video on Kruzader the old one has been removed and the Binhex one don't seem to find the unassigned devices. Thank you
Hi Thanks for this video. Everything works fine (freshrss, nextcloud, bitwarden...) except lidarr and documentserver for nextcloud. All my subdomains are A type. Ping cannot find the host and nslookup doesn't show cloudflare IP. Any idea ?
I finally get it all setup do exactly as you do then when i reset letencrypt i get this error only : nginx: [emerg] "server" directive is not allowed here in /config/nginx/proxy-confs/deluge.subdomain.conf:3 No matter what config i use its the same issue
letsencrypt not working anymore gives this error nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html) nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found: I don't know much on Linux to fix this.
@SpaceinvaderOne - THANK YOU! I got the openvpn set up following your tutorial for that. So decided to give the reverse proxy a try as well (mostly for education purposes). I had to merge the three tutorials (Proxy with HTTP, Proxy with DNS (this one) and Swag) into one to get it done, and I have everything working, my domain is protected on Cloudflare and I have 'Server Ready' on Swag logs but when I try to access the sonarr subdomain I get an error (Error 521: Web Server is down). Can anyone help please?
Hello, First of all, thank you for making these videos. It has been a lot of help in setting my own UnRaid server. I have a question though, I followed everything and it seems like I am getting error. My error reads: nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html) nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found: What should I do in this error? It seems like I am not being able to connect to my nextcloud services. Any help would be awesome.
I followed everything but I am getting a cloudflare error 522 when going to my url now. I also have this on my LetsEncrypt log that still says it is ready but with an error before that. nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html) nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found: no field package.preload['resty.core'] no file './resty/core.lua' no file '/usr/share/luajit-2.1.0-beta3/resty/core.lua' no file '/usr/local/share/lua/5.1/resty/core.lua' no file '/usr/local/share/lua/5.1/resty/core/init.lua' no file '/usr/share/lua/5.1/resty/core.lua' no file '/usr/share/lua/5.1/resty/core/init.lua' no file '/usr/share/lua/common/resty/core.lua' no file '/usr/share/lua/common/resty/core/init.lua' no file './resty/core.so' no file '/usr/local/lib/lua/5.1/resty/core.so' no file '/usr/lib/lua/5.1/resty/core.so' no file '/usr/local/lib/lua/5.1/loadall.so' no file './resty.so' no file '/usr/local/lib/lua/5.1/resty.so' no file '/usr/lib/lua/5.1/resty.so' no file '/usr/local/lib/lua/5.1/loadall.so') Server ready
Rasmus Gade 4 months ago has the solution, have to turn off HTTP proxy on Cloudflare like he does in the video but doesnt say it verbally. Arrow should go around the orange cloud on your cname you create!!! Thanks Spaceinvaderone, you are amazing.
@@jcwade Your comment needs to be pinned to the top and you need a medal. Following this video solved a lot of problems except the 522 error and you pointing that out got me to 100%. Thank you!!!!!
My day gets a whole lot better when i get an alert saying my favourite channel has a new video :) I'm glad i can suppprt the channel being a Patreon.
Still waiting on the pfsense tutorial to automatically transfer from the unraid vm to a bare metal box in case of downed server.
Great video as usual! I always look forward to all your videos.
I have the same wish. Would be great if you make a video could walk us through how you've done your setup.
Would love to see a updated video on how we could utilize nginx proxy manager with next cloud, seafile and others. nginx proxy manager seems really amazing, but as a novice, would love to see a video on it.
agreed
I was one of the people that commented on your LetsEncrypt video because I had an issue. Almost positive my ISP is blocking port 80 but they won't confirm it. I'm gonna try this soon. Thanks!
This must be how grandma feels when she completes a big puzzle.
I love you man, I got this working last night :D :D :D :D :D
Thank you for the very useful video! A couple of weeks ago I had to (temporarily) switch to an ISP that blocks a number of ports. Great timing !
You are the man!! I was stuck using port 82 for my main unraid gui and it was semi frustrating, now I have it back to the name.
I see in this video you have Let's Encrypt Network type set as Bridge and not Proxynet like your last video. Is this a change that needs to happen? If so what other changes need to happen?
Got the same question. Anyone that can help?
Thanks again for another to-the-point technical video! Was beating my head over letsencrypt subdomain credential creation, and this video did the trick.
Could you do a tutorial on how to set up Organizer V2 please?
Could you do a video on TXT record for the domain root that would be needed by your domain to add dns record? Using cloudflare completely messed up my domain for about a week!
Thank you! another great video to the rescue. Ultimatley I found out my ISP has a switch to turn port 80 on and off on thier website. Ugh! Hopefully this info will help someone.
Would be great to see this integrated with the new Swag update, but I managed to figure in the changes and can FINALLY access my nextcloud! Many thanks!!!
Any reason not to use the "proxynet" setting in docker container you previously mentioned? Also, I would love a future video explaining editing out configs to point to subdomains, I still find that confusing as my goal is to limit my ports that are exposed. Thanks again, can't wait to go try this out.
I'd love to know the answer to this too. Does that mean we need to change it back to bridge for all of the dockers using this reverse proxy?
Thank you!
Super helpful as I don't want any ports on my firewall open... but want to use vanity urls to access my dockers.
Nice video, only thing I'd consider missing is reverting the permission change on the entire dns-conf folder
Any idea what the permissions shpuld be changed back too?
Not sure you want to use that global API key instead of the CA API key. The global key also allows for changes to be made to your cloudflare domains while the CA key is only used for certs.
how would one just add the CA API?
As always, a great video! Hope to implement this tonight. I've been wondering for awhile, why not use nano in unraid instead of an external editor?
I really love you’re videos
Thank you so much. What a very helpfull video. You are the king.
Awesome video! Exactly what I was looking for :)
Thanks for watching 😀
Please help me!
An unexpected error occurred:
KeyError: 'code'
Please see the logfiles in /var/log/letsencrypt for more details.
ERROR: Cert does not exist! Please see the validation error above. Make sure you entered correct credentials into the /config/dns-conf/cloudflare.ini file.
Very nice video indeed as always!
I do think you are missing out on saying that it's important to turn off the HTTP proxy function and use "only DNS", when creating a cname.
I know that you are turning it off in the video, but to a new guy trying to get it to work it could be a source to a lot of frustration if he didn't notice and leaves it on.
can you explain why one can't let it run through the orange-cloud. i agree, as it doesn't work when i try, but i'd like to understand the reasons better. thanks!
@@pimogo Yes of course and sorry for late response.
The reason for it not working is because it's a http proxy and as they say themselves
"While CloudFlare can resolve DNS for all of your subdomains, CloudFlare can only proxy domains that would be considered web traffic (www, blog, etc.). Subdomains like ftp, mail should be marked with a gray cloud. You can find the entire list of what should be marked with a gray cloud here."
There is a huge list of services which are not able to use the feature (goo.gl/W8uzGK) and between these is SSL (which makes sense as it is an http proxy), and as we use ssl on port 443 to connect to the proxy server it is kind of pointless to try and use an http proxy first.
Hope this answers your question :)
Otherwise feel free to message me or reply again
Rasmus Gade many thanks for the wonderful explanation!
OMG thank you! Fixed it for me!
Thank you for the very useful and Great video! What a good domain to buy and what did you used?
Love your videos, always super helpful. But why did you point the sonarr sub domain to duckdns in cloudflare? If one had their own domain with a different provider, and had set up several sub domains, would each one need to be added here?
Video request: could you do a video on your setup of having a backup second pfsense with wake on lan?
Bypass port 80 consumer ISP problematics, awesome!
Great video. It worked for me. Do you have any idea if letsencrypt will auto-update my cert in 3 months? I had to change pfsense setting before, so this is an unknown for me.
The steps after creating a cloudflare account when adding a name server, im lost
How do you update lets encrypt on unraid? Maybe I missed it but i couldn't find out how to update it after the 3 months
How would you do this through AWS Route53? Do you need to have cloudflare?
Easier to use your terminal to edit that ini file.
Just one thing I can't figure out. I understand the cert expires every 90 days, and I have seen information about automating it. Is it as easy as restarting the letsencrypt container when I need to update the cert(s)? Or do I need to dive into scripting a certbot renew? Thanks
Does changing my nameservers to cloudflare affect by DDNS setup? Specifically, does this change make me use cloudlfare for managing my domain, or is is business as usual (my current DDNS scripts continue working)? Would like to know be something breaks.
Awesome! got it working, I'm trying to make oAuth2 to work with google but keeps returning named cookie not present, can you make a video showing hot to implement it, this will increase security up a notch. Thanks
Why only subdomains? If you're also wanting your main site to be certed can u leave this as true?
Schwiing no, set it to false.
I get this message at the end of the log for let's encrypt container:
"nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)"
Should I do anything about it?
Found a thread on Reddit about it www.reddit.com/r/unRAID/comments/co8y3m/nginx_error/
Apparently, it's fine to leave it.
can I delete the port forwarding rule for port 80 that was set up in the reverse proxy set up video?
Thank you.
I feel like I'm so close, but this seems like an error I can't ignore.
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)
nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
Nice video.
what about the changes you made at 5:28? 7:35 shows the letsencrypt log file. "unsafe permissions on credentials configuration file: /config/dns-conf/cloudflare.ini" do we need to undo the permisson changes?
just change it back to what it was before with chmod 755 -R /mnt/user/appdata/swag/dns-conf
I don't like setting open folders with world write permissions
It works =). But how do i setup a sub domain to a specific app, for example ombi, to share with my friends ?
Also, does this still need port 443?
Off course it does, otherwise how will you reach your server from outside over HTTPS. You can delete the 80 port forward though as LetsEncrypt will no longer use that
Is there any way you could make a new video on Kruzader the old one has been removed and the Binhex one don't seem to find the unassigned devices. Thank you
I cannot access my subdomains unless I have port 80 forwarded to 180. I thought this should work without that?
Hi
Thanks for this video. Everything works fine (freshrss, nextcloud, bitwarden...) except lidarr and documentserver for nextcloud. All my subdomains are A type. Ping cannot find the host and nslookup doesn't show cloudflare IP.
Any idea ?
I finally get it all setup do exactly as you do then when i reset letencrypt i get this error only : nginx: [emerg] "server" directive is not allowed here in /config/nginx/proxy-confs/deluge.subdomain.conf:3
No matter what config i use its the same issue
What if I'm behind a Crarrier Grade NAT and unable to open any ports?
Call your ISP. Usually the will give you a 'normal' IP again if you need to use port forwarding.
@@elidoteixeira They only give those to business customers, business lines are slower way more expensive and have data caps.
was working perfect. now can not access just times out. have not changed anything.
You may want to double-check all of your frames, your email is briefly visible.
Yeah, I noticed that one as well. @spaceinvader it's worth to take a look at the 6:20 minute mark and see if it is a problem for you or not
more like @6:17
All my subdomains how return a host error after getting this and cloudflare dyndns setup. I'm lost on how to resolve.
Mine do as well, I do not know how to resolve. Did you ever figure it out?
Hi, could you pls do a video about IPV6？
Is et also possible without moving dns provider to cloudfare?
2:58 - what if my domain already has a certificate?
can I also use cloudflare on pfsense to provide ddns service?
letsencrypt not working anymore gives this error nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)
nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
I don't know much on Linux to fix this.
Please help. How do you auto renew LetsEncrypt?
6:17 email :O
LOL I've just done it the day before this video was out
@SpaceinvaderOne - THANK YOU! I got the openvpn set up following your tutorial for that. So decided to give the reverse proxy a try as well (mostly for education purposes).
I had to merge the three tutorials (Proxy with HTTP, Proxy with DNS (this one) and Swag) into one to get it done, and I have everything working, my domain is protected on Cloudflare and I have 'Server Ready' on Swag logs but when I try to access the sonarr subdomain I get an error (Error 521: Web Server is down).
Can anyone help please?
I get the same any luck?
Getting the same problem, did you ever figure it out?
Hello,
First of all, thank you for making these videos. It has been a lot of help in setting my own UnRaid server.
I have a question though, I followed everything and it seems like I am getting error.
My error reads:
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)
nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
What should I do in this error? It seems like I am not being able to connect to my nextcloud services.
Any help would be awesome.
I followed everything but I am getting a cloudflare error 522 when going to my url now. I also have this on my LetsEncrypt log that still says it is ready but with an error before that.
nginx: [alert] detected a LuaJIT version which is not OpenResty's; many optimizations will be disabled and performance will be compromised (see github.com/openresty/luajit2 for OpenResty's LuaJIT or, even better, consider using the OpenResty releases from openresty.org/en/download.html)
nginx: [error] lua_load_resty_core failed to load the resty.core module from github.com/openresty/lua-resty-core; ensure you are using an OpenResty release from openresty.org/en/download.html (rc: 2, reason: module 'resty.core' not found:
no field package.preload['resty.core']
no file './resty/core.lua'
no file '/usr/share/luajit-2.1.0-beta3/resty/core.lua'
no file '/usr/local/share/lua/5.1/resty/core.lua'
no file '/usr/local/share/lua/5.1/resty/core/init.lua'
no file '/usr/share/lua/5.1/resty/core.lua'
no file '/usr/share/lua/5.1/resty/core/init.lua'
no file '/usr/share/lua/common/resty/core.lua'
no file '/usr/share/lua/common/resty/core/init.lua'
no file './resty/core.so'
no file '/usr/local/lib/lua/5.1/resty/core.so'
no file '/usr/lib/lua/5.1/resty/core.so'
no file '/usr/local/lib/lua/5.1/loadall.so'
no file './resty.so'
no file '/usr/local/lib/lua/5.1/resty.so'
no file '/usr/lib/lua/5.1/resty.so'
no file '/usr/local/lib/lua/5.1/loadall.so')
Server ready
Rasmus Gade
4 months ago has the solution, have to turn off HTTP proxy on Cloudflare like he does in the video but doesnt say it verbally. Arrow should go around the orange cloud on your cname you create!!! Thanks Spaceinvaderone, you are amazing.
@@jcwade Your comment needs to be pinned to the top and you need a medal. Following this video solved a lot of problems except the 522 error and you pointing that out got me to 100%. Thank you!!!!!
got it
You may want to recreate your CF api key, because spaceinvadermedia@gmail was visible..
Unraid vs Proxmox VE
777 is never the right answer!