I know I speak for everyone when I say you are amazing. You're like that inspirational teacher at school with the patience of a Saint. I started using Unraid because of your videos and I reference them anytime I get stuck. Your explanations and thoroughness is exceptional. Keep up the good work and never leave us 😊
I can't get enough, I'm not even following them to setup my server yet because I'm waiting on parts, but I'm just addicted, on my lunch break, all the time. You're so amazing at this, please continue to do what you're doing, all the best
I have had subs on my channel ask me to do unraid tutorials. Why would I do that? When, Ed your content is simply perfect! I am happy to send them your way. You rock brother! I may show off my hard ware but I don't think anyone can do a better job than this. Best to simply send them to your channel. Nothing but love for you bro! I have been subscribed for a long time under my regular youtube account. I need to add you to my community page.
Big shout out to the unraid team for making this easier and for spaceinvader for doing this video, literally set this up last week and my USb just died after 5 years, lifesaver
Finally an accurate description of how DMZ works 14:46. The number of times some naïve youtuber thinks they know how to get around it is so frustrating
Using your series of videos to get set up with my first server! Thanks for the walkthrough on setting up the port forwarding, I wouldn't have thought to do it that way!
Awesome new features but I won't open a connection to my server over the unraid guys. I'll stick to a VPN connection if I truly need to access the server but the flash backup is just brilliant.
Just new to unraid...on the 'learning curve!!' :-) I have just set up Unraid, however, am unable to use port 443 (some research indicated that some ISPs prevent you from using this), however, I successfully used another port! :-) Great series of tutorials...keep going...I have just subscribed :-)
@@JokerzWildmuse I’m setting up a couple of vm’s for school (CS masters). All of my professors have different Os’s they want us to use. Windows, Ubuntu, Arch, etc… I figured it would be easier to just set up a dedicated virtualization machine lol. Also I want to pass through an old 5700xt I bought before gpu prices skyrocketed so I can play some games on the side!
Great Tutorial Mr Ed! Much appreciated, keep doing what your doing, we will continue to support you for years to come! Regards Shane from Trinidad 🇹🇹 :)
In the reverse proxy video could you please include setting up Authelia? This is a great way to secure remote access to your web services without compromising on usability. Having a self hosted single sign on service is great
little discouraging seeing how the backups are not encrypted. Especially given the fact these servers usually store critical information about a user. If security is an issue I do not recommend using the feature till encryption is added. nice to see the feature is being added but lack of encryption is just a no go for me.
In principle I agree, but the backup only contains the configuration data for the boot flash, no data from the array itself is backed up to Unraid's servers.
I just learned how the Remote Access feature works, and I must say... That's absolutely terrifying. Do not enable this. You're exposing your server to the internet. I would hope that there are no vulnerabilities associated with the WebGUI, but as LimeTech being a company who has in the past had an "It's not really secure, just accept it" stance to one where they're willing to tell their users to just go ahead and drop the web port on the internet, I wouldn't be certain. SpaceInvader One, you're a smart guy. Certainly you know the implications of configuring your server in such a way. Don't suggest people do this.
I recently read about the shit storm that ensued with loads of domains being scannable and completely exposed. So yeah this was a monumental fuckup of an idea.
I just did a fresh install with the Pro License and it seems the App's tab has been replaced with Plugins which require a link to the plugin. Unraid.net is not available in the plugins repo
Spaceinvader One, love your videos and the back to basics ones you have started doing. Question, doesn't CloudFlare enable DNS rebinding by default? I use an Ubiquity X router and I tried inputting the recommended settings to set unraid.net to allowed (set service dns forwarding options rebind-domain-ok=/unraid.net/) still no provision. I setup Cloudflare per your other video too. I also use Pi-hole to serve as my DNS server (My USG router only uses my DNS ip from Pi-Hole on my Raspberry PI 4 box). Any suggestions?
First; Security by obscurity is not a good thing. Allowing remote access by port-forwarding is also a big no-no. Unraid have support for Wireguard now, thats a way better approach for remote access. It would have been better if unraid provide a dyndns-service for making the vpn easy to set up even on dynamic ip-addresses..
Great series, thanks you so much for the information. I'll be doing my first proper unraid server in a couple of week (I only test it on an old laptop). I have a question, my ISP use a CGNat and any port forwarding didn't work with my plex server, Do you or anyone now a way out or something? also i have ipv6
Just upgraded my Unraid system yesterday. Well, sort of lol. I moved the system (i7-4790 CPU, 32gb Ram, three 4tb HDDs, one 512gb SSD) from an old tower PC case to a NORCO RPC-4220 4U Rackmount Server Chassis with 20 hot-swappable drive bays.
Following Question/Concern: Is it possible to delete the (currently) unencrypted flash backup from the unraid servers? Even when i logout, remove the plugin, and so on, when i relog to unraid.net i can download the old flash backup. So is it even possible to delete it?
I already had 443 routed into Swag, so setting up a forwarding rule from a new port to 443 allowed access without modifying anything in the Swag configs. For now I only have one server though, so I think I'll switch this back off and just use a VPN. Really like this feature for if/when I setup multiple servers though.
Is port forwarding consider a hole or breach in your firewall? The info I have been seeing is you don't want any remote access to your server unless it is through a VPN. I run a simply unraid server for Plex and I am always wondering if its secure or not. I basically use all you tutorials which are amazing! Thanks for all your content. Lol I didn't watch to the end video sounds like your going to address all that in your next vid. Thanks again Cheers
Changed https port to xxx, did portforwarding to that port, worked local with name.local or with local ipadress. Now I rebooted the server and can’t access webgui from server itself of from the ipadress. What can I do?
I'm learning so much from you.... This is so great for a novice like me. After watching bunch of videos on how to have secure remote access and before having equipment to test with, I still have few questions.... With Unraid 6.9.x or 6.10, which apps should I use to secure my remote connection to the Unraid WebGui? Assuming that i do not have DMZ turned on on my router, will working with "My Servers" app bring similar security levels than using Wireguard, or OpenVPN or Nginx Reverse Proxy App? For what purpose should we use those apps in combination for remote access? And finally, am I correct to think that "my servers" app is dealing with the SSL certificate and not giving a private & protected connection via VPN?
Got this setup and running....cool feature and great video! I have one question/comment, I assume you are unable to test remote access unless you are truly remote right? In other words you can not test it if you are on a computer that is on the same Man as the unraid server? I only see local access as an option. That makes sense but wanted to clarify.
That is correct. To test you will need to be elsewhere. If the check button on the setting works then it will work fine when you are away. Thanks for watching.
Great video again thanks! But as allways my ISP is blocking all the fun. The provided modem by the ISP has DNS Rebinding protection and doesn't allow NAT hairpinning... but my new pfSense-modem will arrive soon :)
Great video as always, just one question. What if you wanted to undo the certificate provisioning and go back to default? Oh also, the uptime on the Unraid forum page does not match that of the actual server uptime. Guessing I would have to restart the server to get them to match up. Plug-in is beta so I know it's to be expected.
If you are already forwarding the ports 80 and 433 to an Nginx Container running on Unraid (which I just did from one of your videos) is it possible to expose the Unraid Web GUI through the Reverse Proxy? I already setup a ..com which points to my public IP which is forwarding the ports 80 and 443 to my Reverse Proxy. I have already setup the SSL certificate for that subdomain so all it is missing is the config. Is it possible to have the reverse proxy contain sit in front of Unraid itself? I would think I just need to expose the private IP address of Unraid Server and the port is running on but the conf examples in the NGinx folder all seem to be assuming you are exposing a docker container
I was wondering if you could do a video about cleaning up my docker img... It's set to 40GB and filled itself up like crazy and I am not sure what's doing it
Love your videos and I plan on building my own Unraid with my 6700k I'm using now being donated when I upgrade. I do not see why you would run a Gaming Windows 10 VM though? Surely that would make more sense to run bare metal? Also to play a game on a VM properly you would need to be plugged into the GPU and nearby the server correct?
Why would you not? You pass through the GPU. The Windows install is bare metal, and you use this install for the VM, you don't make a virtual image. Follow his guide. It allows you to have a server and gaming machine in one with little performance loss.
Hi, first of all amazing work on all the unraid video's I started last week getting into unraid and building my own (used Synology for years). So very helpfull all you do on here, much appreciated. Quick question on this video though. I cannot seem to find the unraid.net plug in in the APPS tab. Is it removed or renamed maybe? Thanks for your help in advance. Kind regards, JiltedGeek.
I think I've found the reason why I did not find it. I was using the trial version. Now that I have paid for a license the plug in is visible. Could be a coincidence, but at least I can install it now ;)
@Spaceinvader One How do I undo this please, It's messing with my Resilio sync and my backups are now stuck at 300kb/s over a 10Gb/s connection. I have uninstalled it but the provisioning is still present. Help!!
All this is grate but now if my internet go's down I cant access my servers also if I have a few browser tabs open I can't easily tell witch server I'm looking at anymore because I used to look at the IP in the tab How do I undo the Provisioning or whatever I need to do to stop my normal internal IP from being resolved to unraid.net??? I don't leave the house anyway so at the moment for me the Cons out weigh the Pros.
if your DNS on router is set to 1.1.1.1, you will get DNS rebinding error as well, so make sure you set your DNS on your router to something else or one that's provided by your ISP
@Bee Eff Yes, that's correct. Your server isn't 2FA protected just because you enabled 2FA for unraid.net, but your user account for unraid.net should be. So when he logs into unraid.net from the server there should be a 2FA prompt, otherwise it's just a useless feature if it's possible to bypass the 2FA login. Depending on how the plugin is implemented (I haven't checked), but unraid.net could "remember" your browser from previous logins and not prompt 2FA in that case. But in that case the server isn't logged in, just your browser. If the server is logging in to unraid.net, then there really should be a 2FA prompt IMO, since it's a "new client".
Great video as always. Unfortunately, BT (UK) does indeed have DNS rebinding on, so no remote access as can't provision the cert. In order to fix, I needed to stop VM Manager and Docker, and manually change my DNS settings under settings/network from auto (192.168.1.254 BT default) to static... I opted for 1.1.1.1 and 8.8.8.8. Hit apply, then went back to provision. I got the error again initially, but hit provision again, and then it worked. Hope this helps.... baldfox out
My Downloads folder has disappeared, Found the info through Kurusader, I have just upgraded to 6.9.2 What Do I need to do? I moved the files to a different folder
Firstly great videos one of the reasons I'm subscribed you are the Unraid and former PFSense Guru not sure what's happening with PFSense these days, But i can’t seem to get remote access, Router is setup cert done and updated, check wan port goes through fine, just can’t see it online unless I’m on the local address. Any reason for that? Cancel that! A restart of the server has solved the remote access thing, (I would have loved if it gave me access to Sonarr and Radarr too)
What happen when your using port 443 for Swag or NginxProxyManager to map port 1443 to 443 and 180 to 80, can you use some other port to remote connect.
Those ports will not conflict. For reverse proxy you are forwarding external port 443 to internal port 1443 for reverse proxy. For my servers the external port (in this vid) is 14444 bein forwarded to the internal port 443. :)
didn't find a solution yet. I think I'm just going to wait for a while for some of the ease-of-use to get sorted out. I have a decent solution here with a Wireguard VPN, and duckdns.
Hey spaceinvader, after I tried to setup remote access from outside of my lan I'm having an issue where the remote access button takes me to my nextcloud login page. I think swag is affecting it. Is there a way to make these both work at once?
so ive been at this for months now and im unable to get the remote access to work due the dns rebinding protection and i cant find out how to fix it or disable it im not using pfsence just a huawei wifi ax3 router and i cant find the setting but a friend who is using the same router can use remote access just fine if anyone can help id really appreciate it
Maybe I am not seeing something here, but how does the different port add security if we map it to 443 anyways? Won't it just add security in my LAN where no-one should have access to anyway?
This stops basic port scanners, scanning common ports only from finding the unraid login page. Also you will most likely want 443 for swag later on.
3 года назад
@@mrforsythdevon yes i see that, but once I forward the port to 443 in my router, it won't make any difference which internal port i set. It will be port 443 in the internet regardless, right?
@ kinda, technically it's "really" 443 that you get access to. When you are home you can use port 443, (and maybe 14444 in this example if your router understands edge dns pinning). However when you are not on the home network, only port 14444 will be visible, if you try and access 443, you will get nothing (based on this config). This setup offers a small bit of security through obsecurity. Please also consider this is an encrypted port as well. Hope that helps
3 года назад
@@mrforsythdevon how will only port 14444 be visable outside the home network though, if I forward that port to 443, that's what I'm not getting.
@ that is the port that you set in the NAT configuration on your router. All TCP/IP devices should be able to support port ranges from 1 to 65535. NAT is network address translation. When you go online you may or may not have a static ip, but it could be something like 134.134.134.134. You can have a lot of computers behind your home network. These are not public ally exposed to the internet. NAT takes the internal ip address of a computer (handed out by DHCP normally) of something like 192.168.1.10 (this a reserved address space, so should never ever see a 192.168.X.X on the internet) and translate the packet to the outside world, the server outside your network can't find 192.168 (as its internal to you), so the packet is modified to return to your routers public IP address 134.134.134.134, and its tagged in a way that the router knows how to translate that back to the local computer that requested the connection. This is a bit why spaceinvader one talks about DMZ being a bad thing, as if you don't understand this, you are likley to get hacked at some point. As this will make one computer on your network the target of all inbound traffic. So what you are doing here is saying to your router (134.134.134.134) that if a device on the internet wants to get to my unraid server it must talk to me on port 14444. (then the router will translate this via NAT) into 14444 to your internal server ip 192.168.1.10 I hope this helps a little more, Also have to give credit to spaceinvader one, I can now see how trying to keep this simple for people is extremely hard.
So far I've just been able to access the webUI. Dockers is still re-directing to local home IP address. Maybe his next video will fix this with reverse proxy. I had reverse proxy working in Proxmox using lxc running nginx via docker. However recently something broke it, I'm still troubleshooting.
No you cant access the docker container webguis as they use there own ports. The best for this would be to use vpn to access whole network. Openvpn or wireguard. this will be covered in the upcoming security series
A DMZ is not guaranteed hack, you are putting zero confidence in unraid. There are millions of servers out there which have 1 or more ip's pointed at them. Which control access with software firewalls. It's not recommend for home users I agree, if they don't undetstand it, especially if you still want upnp and other IOT devices to work. It would have been better to explain the risks, or people won't learn, rather than scaring people off the feature for life, alternatively, there was no need to mention it.
Bruv...
You're the Hardest working man in show-business. You make James Brown look like he was standing still.
Thsts because Mr Brown and the spaceinvader went together famously 😎
bruhv
I know I speak for everyone when I say you are amazing. You're like that inspirational teacher at school with the patience of a Saint. I started using Unraid because of your videos and I reference them anytime I get stuck. Your explanations and thoroughness is exceptional. Keep up the good work and never leave us 😊
I can't get enough, I'm not even following them to setup my server yet because I'm waiting on parts, but I'm just addicted, on my lunch break, all the time. You're so amazing at this, please continue to do what you're doing, all the best
Hey Absy. I am really glad you like the videos. Good luck on the upcoming build. Thanks for watching :)
Setting up my first Unraid server, never would have worked without you're videos. Big Thanks
You have helped me understand Unraid better than any tutorial or video I have watched yet. Thank you for your service to the hobby!
Glad I could help! Thanks for watching :)
Your channel is a godsend, i'm about to start my first home server and i cant wait to follow all your guides!
I have had subs on my channel ask me to do unraid tutorials. Why would I do that? When, Ed your content is simply perfect! I am happy to send them your way. You rock brother! I may show off my hard ware but I don't think anyone can do a better job than this. Best to simply send them to your channel. Nothing but love for you bro! I have been subscribed for a long time under my regular youtube account. I need to add you to my community page.
Big shout out to the unraid team for making this easier and for spaceinvader for doing this video, literally set this up last week and my USb just died after 5 years, lifesaver
Finally an accurate description of how DMZ works 14:46. The number of times some naïve youtuber thinks they know how to get around it is so frustrating
Using your series of videos to get set up with my first server! Thanks for the walkthrough on setting up the port forwarding, I wouldn't have thought to do it that way!
Thanks for showing me how to set up a DMZ. Now my UnRAID server is working perfectly! ;)
Awesome new features but I won't open a connection to my server over the unraid guys. I'll stick to a VPN connection if I truly need to access the server but the flash backup is just brilliant.
Agree. VPN is pretty easy to do and so much safer.
Just new to unraid...on the 'learning curve!!' :-) I have just set up Unraid, however, am unable to use port 443 (some research indicated that some ISPs prevent you from using this), however, I successfully used another port! :-) Great series of tutorials...keep going...I have just subscribed :-)
I have an unraid server up and ready to go but I can’t get a VM going. Can’t wait for the next episode!
That was me too! Spent days on the forums and watching spaceinvader's vids. What OS you running? Any hardware passthrough?
@@JokerzWildmuse I’m setting up a couple of vm’s for school (CS masters). All of my professors have different Os’s they want us to use. Windows, Ubuntu, Arch, etc… I figured it would be easier to just set up a dedicated virtualization machine lol.
Also I want to pass through an old 5700xt I bought before gpu prices skyrocketed so I can play some games on the side!
Agreed with Affable Guacamole, your awesome and can't wait for the next.
I love the fake unraid screen saver you made!😀
lol, thanks man, glad you not only noticed it but liked it too :)
reminds me of (DVD)
this mad lad
Mate, you are one of the best people I've never met. I appreciate you.
Loving this series, whens the next video?
Love learning more about what Unraid can do!
Thanks for the demo and info, have a great day
You do such a great service to all unraid users and unraid, keep up great work
Thank you very much! Glad you find the videos useful :)
Excellent as ever . took a bit of digging to get my fritzbox router set up but all good now . ready for next one . :)
Long time UnRaid user getting a lot our of this series! Thanks much!
Thank you @Spaceinvader one
Great Tutorial Mr Ed! Much appreciated, keep doing what your doing, we will continue to support you for years to come! Regards Shane from Trinidad 🇹🇹 :)
Looking forward the securing Unraid Video.
This new features is awesome!Thanks for this news.
Amazing!! Thank you very, very much. I had no idea this feature was available in unRaid! :)
Thank you so much for all your amazing work :D
My pleasure! Thanks for watching :)
Great video. Always easy to follow along. Can’t wait for the next one.
Thanks so much Ed! Keep doing what you do.
In the reverse proxy video could you please include setting up Authelia? This is a great way to secure remote access to your web services without compromising on usability. Having a self hosted single sign on service is great
Another great video Ed! Thanks for always sharing with us!💖👌👍😎JP
Isn't it more secure to just connect to your LAN via open VPN to connect to your unraid remotely?
This is useful when you have multiple servers in different locations. For one server I prefer to login to my VPN
Can’t wait for the next video on VM’s
Wow. Great unraid features in this and great video.
little discouraging seeing how the backups are not encrypted. Especially given the fact these servers usually store critical information about a user. If security is an issue I do not recommend using the feature till encryption is added. nice to see the feature is being added but lack of encryption is just a no go for me.
In principle I agree, but the backup only contains the configuration data for the boot flash, no data from the array itself is backed up to Unraid's servers.
I just learned how the Remote Access feature works, and I must say... That's absolutely terrifying. Do not enable this. You're exposing your server to the internet. I would hope that there are no vulnerabilities associated with the WebGUI, but as LimeTech being a company who has in the past had an "It's not really secure, just accept it" stance to one where they're willing to tell their users to just go ahead and drop the web port on the internet, I wouldn't be certain.
SpaceInvader One, you're a smart guy. Certainly you know the implications of configuring your server in such a way. Don't suggest people do this.
I recently read about the shit storm that ensued with loads of domains being scannable and completely exposed. So yeah this was a monumental fuckup of an idea.
I just did a fresh install with the Pro License and it seems the App's tab has been replaced with Plugins which require a link to the plugin. Unraid.net is not available in the plugins repo
Spaceinvader One, love your videos and the back to basics ones you have started doing. Question, doesn't CloudFlare enable DNS rebinding by default? I use an Ubiquity X router and I tried inputting the recommended settings to set unraid.net to allowed (set service dns forwarding options rebind-domain-ok=/unraid.net/) still no provision. I setup Cloudflare per your other video too. I also use Pi-hole to serve as my DNS server (My USG router only uses my DNS ip from Pi-Hole on my Raspberry PI 4 box). Any suggestions?
First; Security by obscurity is not a good thing. Allowing remote access by port-forwarding is also a big no-no. Unraid have support for Wireguard now, thats a way better approach for remote access. It would have been better if unraid provide a dyndns-service for making the vpn easy to set up even on dynamic ip-addresses..
Great series, thanks you so much for the information. I'll be doing my first proper unraid server in a couple of week (I only test it on an old laptop). I have a question, my ISP use a CGNat and any port forwarding didn't work with my plex server, Do you or anyone now a way out or something? also i have ipv6
Just upgraded my Unraid system yesterday. Well, sort of lol. I moved the system (i7-4790 CPU, 32gb Ram, three 4tb HDDs, one 512gb SSD) from an old tower PC case to a NORCO RPC-4220 4U Rackmount Server Chassis with 20 hot-swappable drive bays.
Following Question/Concern: Is it possible to delete the (currently) unencrypted flash backup from the unraid servers? Even when i logout, remove the plugin, and so on, when i relog to unraid.net i can download the old flash backup. So is it even possible to delete it?
Excellent Ed. Will install the plug-in I think will hold off the remote access. As ever look forward to the next video.
I already had 443 routed into Swag, so setting up a forwarding rule from a new port to 443 allowed access without modifying anything in the Swag configs. For now I only have one server though, so I think I'll switch this back off and just use a VPN. Really like this feature for if/when I setup multiple servers though.
Is port forwarding consider a hole or breach in your firewall? The info I have been seeing is you don't want any remote access to your server unless it is through a VPN. I run a simply unraid server
for Plex and I am always wondering if its secure or not. I basically use all you tutorials which are amazing! Thanks for all your content. Lol I didn't watch to the end video sounds like your going to address all that in your next vid. Thanks again Cheers
Changed https port to xxx, did portforwarding to that port, worked local with name.local or with local ipadress. Now I rebooted the server and can’t access webgui from server itself of from the ipadress. What can I do?
Another great video. Thanks
Spaceinvaderone! Are you using stock firmware on your router? The shame.
Great, really nice features!
I'm learning so much from you.... This is so great for a novice like me. After watching bunch of videos on how to have secure remote access and before having equipment to test with, I still have few questions....
With Unraid 6.9.x or 6.10, which apps should I use to secure my remote connection to the Unraid WebGui? Assuming that i do not have DMZ turned on on my router, will working with "My Servers" app bring similar security levels than using Wireguard, or OpenVPN or Nginx Reverse Proxy App? For what purpose should we use those apps in combination for remote access? And finally, am I correct to think that "my servers" app is dealing with the SSL certificate and not giving a private & protected connection via VPN?
Great video! Great work!
4:50 copy for the lazy ones: *unraid-api restart*
Running 6.11.5 the "Use SSL/TLS" does not say 'auto'. It only says, 'Yes, No, Strict'. How do I get it to auto?
Got this setup and running....cool feature and great video! I have one question/comment, I assume you are unable to test remote access unless you are truly remote right? In other words you can not test it if you are on a computer that is on the same Man as the unraid server? I only see local access as an option. That makes sense but wanted to clarify.
That is correct. To test you will need to be elsewhere. If the check button on the setting works then it will work fine when you are away. Thanks for watching.
i turned off the wifi on my phone and connected using 4G , just to see if i could .. and it worked
Great video again thanks!
But as allways my ISP is blocking all the fun. The provided modem by the ISP has DNS Rebinding protection and doesn't allow NAT hairpinning... but my new pfSense-modem will arrive soon :)
One of my servers connected fine...the other refuses to connect even after running the API restart and an actual restart.
Great video as always, just one question. What if you wanted to undo the certificate provisioning and go back to default? Oh also, the uptime on the Unraid forum page does not match that of the actual server uptime. Guessing I would have to restart the server to get them to match up. Plug-in is beta so I know it's to be expected.
If you are already forwarding the ports 80 and 433 to an Nginx Container running on Unraid (which I just did from one of your videos) is it possible to expose the Unraid Web GUI through the Reverse Proxy? I already setup a ..com which points to my public IP which is forwarding the ports 80 and 443 to my Reverse Proxy. I have already setup the SSL certificate for that subdomain so all it is missing is the config. Is it possible to have the reverse proxy contain sit in front of Unraid itself? I would think I just need to expose the private IP address of Unraid Server and the port is running on but the conf examples in the NGinx folder all seem to be assuming you are exposing a docker container
I was wondering if you could do a video about cleaning up my docker img... It's set to 40GB and filled itself up like crazy and I am not sure what's doing it
Thanks again SI1, you're the best :)
Thanks glad you like the vids :)
great job
Love your videos and I plan on building my own Unraid with my 6700k I'm using now being donated when I upgrade. I do not see why you would run a Gaming Windows 10 VM though? Surely that would make more sense to run bare metal? Also to play a game on a VM properly you would need to be plugged into the GPU and nearby the server correct?
Why would you not? You pass through the GPU. The Windows install is bare metal, and you use this install for the VM, you don't make a virtual image. Follow his guide. It allows you to have a server and gaming machine in one with little performance loss.
This is fantastic!
errrm I've ended up with two menu ribbons lol! both function. everything else seems to be working great!
Hi, first of all amazing work on all the unraid video's I started last week getting into unraid and building my own (used Synology for years). So very helpfull all you do on here, much appreciated. Quick question on this video though. I cannot seem to find the unraid.net plug in in the APPS tab. Is it removed or renamed maybe? Thanks for your help in advance. Kind regards, JiltedGeek.
I think I've found the reason why I did not find it. I was using the trial version. Now that I have paid for a license the plug in is visible. Could be a coincidence, but at least I can install it now ;)
Need to follow the recently updated instructions on wiki.unraid.net/My_Servers which tells you how to get the APPS tab!
can you show the dns resolver settings for pfsense to avoid the dns rebinding protection error - still cannot provision the certificate because of it.
Hi Bullet proof I have just added that to the description of the video along with a pic of the settings for pfSense :)
@Spaceinvader One How do I undo this please, It's messing with my Resilio sync and my backups are now stuck at 300kb/s over a 10Gb/s connection.
I have uninstalled it but the provisioning is still present.
Help!!
On the managment access page, try switching the Use SSL/TLS: to 'NO; then it will use the local ip again. I hope this helps :)
All this is grate but now if my internet go's down I cant access my servers also if I have a few browser tabs open I can't easily tell witch server I'm looking at anymore because I used to look at the IP in the tab
How do I undo the Provisioning or whatever I need to do to stop my normal internal IP from being resolved to unraid.net???
I don't leave the house anyway so at the moment for me the Cons out weigh the Pros.
When will you do a seafile video?
Another great video, however I prefer connecting to my server remotely using a vpn tunnel such as zerotier where no port forwarding is necessary.
if your DNS on router is set to 1.1.1.1, you will get DNS rebinding error as well, so make sure you set your DNS on your router to something else or one that's provided by your ISP
In the beginning you enabled 2FA, but you never had to use it when logging in to unraid.net?? 🤔
I was wondering about that too
@Bee Eff Yes, that's correct. Your server isn't 2FA protected just because you enabled 2FA for unraid.net, but your user account for unraid.net should be. So when he logs into unraid.net from the server there should be a 2FA prompt, otherwise it's just a useless feature if it's possible to bypass the 2FA login.
Depending on how the plugin is implemented (I haven't checked), but unraid.net could "remember" your browser from previous logins and not prompt 2FA in that case. But in that case the server isn't logged in, just your browser. If the server is logging in to unraid.net, then there really should be a 2FA prompt IMO, since it's a "new client".
Great video as always. Unfortunately, BT (UK) does indeed have DNS rebinding on, so no remote access as can't provision the cert. In order to fix, I needed to stop VM Manager and Docker, and manually change my DNS settings under settings/network from auto (192.168.1.254 BT default) to static... I opted for 1.1.1.1 and 8.8.8.8. Hit apply, then went back to provision. I got the error again initially, but hit provision again, and then it worked. Hope this helps.... baldfox out
Thanks for sharing that info and thanks for watching :)
My Downloads folder has disappeared, Found the info through Kurusader, I have just upgraded to 6.9.2 What Do I need to do? I moved the files to a different folder
question. from a remote network are you able to go unraid's wan:port? will this get you to the unraid's gui?
Yes, it does.
Firstly great videos one of the reasons I'm subscribed you are the Unraid and former PFSense Guru not sure what's happening with PFSense these days, But i can’t seem to get remote access, Router is setup cert done and updated, check wan port goes through fine, just can’t see it online unless I’m on the local address. Any reason for that?
Cancel that! A restart of the server has solved the remote access thing, (I would have loved if it gave me access to Sonarr and Radarr too)
What happen when your using port 443 for Swag or NginxProxyManager to map port 1443 to 443 and 180 to 80, can you use some other port to remote connect.
Those ports will not conflict. For reverse proxy you are forwarding external port 443 to internal port 1443 for reverse proxy. For my servers the external port (in this vid) is 14444 bein forwarded to the internal port 443. :)
Anyone else have a Pihole and running into the DNS rebinding issue for the ssl cert? i have an asus router but using the pihole for dns and dhcp. :P
I do. Looking for solution... I'll post when I find it.
didn't find a solution yet. I think I'm just going to wait for a while for some of the ease-of-use to get sorted out. I have a decent solution here with a Wireguard VPN, and duckdns.
@redbutcher1 tried that, and didn't have any luck. Maybe it's because I turned on some local DNS caching thing? "unbound"?
Hey spaceinvader, after I tried to setup remote access from outside of my lan I'm having an issue where the remote access button takes me to my nextcloud login page. I think swag is affecting it. Is there a way to make these both work at once?
replying so I can see any updates. have the same problem
@@connorazzarello5514 I solved the issue, if you want to add me on Discord I can help you out. ~/Ningen#7936
@MrMcFex yeah I ended up figuring it out, thanks for replying and giving a solution hopefully it can't help others!
so ive been at this for months now and im unable to get the remote access to work due the dns rebinding protection and i cant find out how to fix it or disable it
im not using pfsence just a huawei wifi ax3 router and i cant find the setting but a friend who is using the same router can use remote access just fine
if anyone can help id really appreciate it
I've just learned this feature existed thx to the last survey.
Thanks, it is like you made this one for me
Hope you like it!
I do, the weird thing is that I provisioned it from your much earlier video on duckdns and security. It is provisioned but doesn’t work w my server.
Do you have a ZFS video for unraid?
is there a way to get the cert for local network?
Maybe I am not seeing something here, but how does the different port add security if we map it to 443 anyways?
Won't it just add security in my LAN where no-one should have access to anyway?
This stops basic port scanners, scanning common ports only from finding the unraid login page. Also you will most likely want 443 for swag later on.
@@mrforsythdevon yes i see that, but once I forward the port to 443 in my router, it won't make any difference which internal port i set. It will be port 443 in the internet regardless, right?
@ kinda, technically it's "really" 443 that you get access to. When you are home you can use port 443, (and maybe 14444 in this example if your router understands edge dns pinning). However when you are not on the home network, only port 14444 will be visible, if you try and access 443, you will get nothing (based on this config). This setup offers a small bit of security through obsecurity. Please also consider this is an encrypted port as well. Hope that helps
@@mrforsythdevon how will only port 14444 be visable outside the home network though, if I forward that port to 443, that's what I'm not getting.
@ that is the port that you set in the NAT configuration on your router. All TCP/IP devices should be able to support port ranges from 1 to 65535. NAT is network address translation. When you go online you may or may not have a static ip, but it could be something like 134.134.134.134. You can have a lot of computers behind your home network. These are not public ally exposed to the internet. NAT takes the internal ip address of a computer (handed out by DHCP normally) of something like 192.168.1.10 (this a reserved address space, so should never ever see a 192.168.X.X on the internet) and translate the packet to the outside world, the server outside your network can't find 192.168 (as its internal to you), so the packet is modified to return to your routers public IP address 134.134.134.134, and its tagged in a way that the router knows how to translate that back to the local computer that requested the connection.
This is a bit why spaceinvader one talks about DMZ being a bad thing, as if you don't understand this, you are likley to get hacked at some point. As this will make one computer on your network the target of all inbound traffic.
So what you are doing here is saying to your router (134.134.134.134) that if a device on the internet wants to get to my unraid server it must talk to me on port 14444. (then the router will translate this via NAT) into 14444 to your internal server ip 192.168.1.10
I hope this helps a little more, Also have to give credit to spaceinvader one, I can now see how trying to keep this simple for people is extremely hard.
@Spaceinvader One check the newest Docker of unmanic. i think this is very helpful an easy to use for alot of people
Can you just access the webUI or can you access dockers too?
So far I've just been able to access the webUI. Dockers is still re-directing to local home IP address. Maybe his next video will fix this with reverse proxy. I had reverse proxy working in Proxmox using lxc running nginx via docker. However recently something broke it, I'm still troubleshooting.
Can you access the docker GUIs remotely?
No you cant access the docker container webguis as they use there own ports. The best for this would be to use vpn to access whole network. Openvpn or wireguard. this will be covered in the upcoming security series
@@SpaceinvaderOne Thanks, I am looking forward to it.
My subdomain did not change.
Has anyone been able to get any of this to work?
Can‘t click on Provision. It do nothing 🤷🏻♂️
this plugin must be baked into the unraid!
i am sure it will be in an upcoming release of Unraid
Absolutely HATE giving 3rd party access to anything on my network. I would never use this, rather use a VPN to access my server.
I DONT Belive in god but HALLLELUUUJA and thanks
Is this a good idea with all these service hacks going? Cough... cough... Ubiquity.
Nice try to fool us. We know your favorite video game is Space Invaders, not Half Life.
first
A DMZ is not guaranteed hack, you are putting zero confidence in unraid. There are millions of servers out there which have 1 or more ip's pointed at them. Which control access with software firewalls. It's not recommend for home users I agree, if they don't undetstand it, especially if you still want upnp and other IOT devices to work. It would have been better to explain the risks, or people won't learn, rather than scaring people off the feature for life, alternatively, there was no need to mention it.
you talk about secure yet you use a netgear you should be using a firewall and not a router if you care about security.