I've been trying to set up a reverse proxy for another docker container and nothing I do can get it to work anymore. No matter what I do I can no longer get https to respond at all.
Sabnzbd works via http://192.168.1.157:8080 and https://192.168.1.157:8081.
Here are all my configs
docker-compose.yml
version: '2'
services:
nginx:
image: nginx:latest
container_name: nginx
volumes:
- /data/config/certbot/conf:/etc/letsencrypt
- /data/config/certbot/www:/var/www/certbot
- /data/config/nginx:/etc/nginx
ports:
- 80:80
- 443:433
env_file: uidgid.env
restart: always
command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"
certbot:
image: certbot/certbot
container_name: certbot
env_file: uidgid.env
volumes:
- /data/config/certbot/conf:/etc/letsencrypt
- /data/config/certbot/www:/var/www/certbot
restart: always
entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
sabnzbd:
image: linuxserver/sabnzbd:latest
container_name: sabnzbd
volumes:
- /data/config/certbot:/etc/letsencrypt
- /data/config/sabnzbd:/config
- complete:/complete
- incomplete:/incomplete
- Shows:/shows
- Movies:/movies
- 4K:/4K
ports:
- 8080:8080
- 8081:8081
env_file: uidgid.env
environment:
- EDGE=1
- VIRTUAL_HOST=mydomain.com/sabnzbd
- VIRTUAL_PORT=8081
restart: always
Nginx configs:
#nginx.conf
events{}
http {
server {
listen 443 ssl;
server_name mydomain.com;
include /etc/nginx/common.conf;
include /etc/nginx/ssl.conf;
location /sabnzbd {
proxy_pass https://192.168.1.157:8081;
include /etc/nginx/common_location.conf;
}
}
}
#ssl.conf
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_certificate /etc/letsencrypt/live/mydomain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mydomain.com/privkey.pem;
ssl_session_timeout 10m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
#common.conf
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
#common_location.conf
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
Netstat shows 443 is listening.
netstat -lpn |grep :443
tcp6 0 0 :::443 :::* LISTEN 12129/docker-proxy
Firewall is disabled.
ufw status
Status: inactive
Iptables not enabled
service iptables status
Unit iptables.service could not be found.
Curl shows connection refused
curl https://192.168.1.157/sabnzbd/
curl: (7) Failed to connect to 192.168.1.157 port 443: Connection refused
Other Curl command:
curl https://127.0.0.1/sabnzbd/
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 127.0.0.1:443
If there's anything else you want to see let me know. Thanks.