Thank you sir, your videos and tutorials are outstanding. Really helped me to get services behind a reverse proxy in a Docker environment where I already have LE certificates for the domain. I just did a happy dance in my lab and I'm sure my client will be doing the same once I show them. Now I must head over to patreon and give a wee bit back for your hard work and generosity!

Amazing tutorial, helped me a lot with apache guacamole, as I could not find a specific tutorial and all the ones I found were wayyyy more complicated. Keep up the good work!

@christianlempa

2 жыл бұрын

Thank you so much!

Wow! This is an exceptional tutorial. Thank you so much, exactly what I needed.Will definitely check out all the rest of your content!

@christianlempa

2 жыл бұрын

Awesome, thank you!

this is my (I don't know, maybe) 5-6 times back to this video, Chris especially in this video is very very my go-to solution in every server I have, I try so many videos about this nginx reverse proxy and SSL things, and no one has very well clear explanation and solving my problem, this video is only one that can solve, and I try in my all servers, and of course, no one fails. really appreciate Chris, you're my man!

Hello Christian, great videos! You forgot to mention one thing in 'Check if auto-renew is working' section: the cronjob won't be executed on systems with systemd (it's written in the comment section of the cronjob after 'Important note!'). So the correct way of checking auto-renewal would be verifying if certbot.timer is active (either by systemctl list-timers or systemctl status certbot.timer)

@christianlempa

3 жыл бұрын

Thank you so much! Also for sharing the details!

man i LOVE YOU BRO really you make my day after 6 hours of searching you save me

@christianlempa

3 жыл бұрын

haha thanks bro :)

Thanks man, Really apreciate when someone explains the code instead of just copy pasting for us

@christianlempa

3 жыл бұрын

Thanks! Glad you liked it :)

Thank you very much Christian, you helped me with a big issue, thanks!!

one of those great tutorials that all you have to do is follow step by step and it really works! huge thanks

This earned my subscription... Excited for video of this on docker

@christianlempa

2 жыл бұрын

Thanks mate! I already did some videos about Docker, Kubernetes is coming soon as well :)

Endlich ein Howto ohne Docker. Vielen Dank du sparst mir viel Arbeit!

@christianlempa

2 жыл бұрын

Hehe gern geschehen 😉

Vielen vielen Dank! Das Video hat mir sehr gut weitergeholfen und ich es wurde auch sehr gut erklärt. Zu keiner Zeit habe ich Probleme gehabt zu wissen was ich da überhaupt mache.

Yes, please augment your excellent video by showing how to do certification for Wireguard. Vielen Dank.

Greetings Christian Thank you for your contributions, these videos are very interesting.

@christianlempa

2 ай бұрын

Glad you like them!

This excellent presentation requires more likes and share, thank you

A very detailed explanation. Thank you

@christianlempa

2 жыл бұрын

You're welcome

Very Great tutorial. Very clear. Thanks for helping!

@christianlempa

Жыл бұрын

Thanks! You’re welcome

Sure I would like to see how to implement wildcard certificate

Thank you! This is really helpful man.

@christianlempa

2 жыл бұрын

Glad it helped!

This is the video I was looking for

Hi, thanks for the video! I first used the nginx proxy with HestiaCP, which has apache & nginx reverse proxy out of the box. And it creates the let's encrypt certificates via nginx conf files (cpanel on the contrary creates real directories and DNS entries to have the acme challenge).

So it is easier than thought. Thanks a lot.

@christianlempa

3 жыл бұрын

Most welcome 😊

Thank Chirstian, it helps me a lot.

@christianlempa

Ай бұрын

Thanks for watching! :)

Great explanation, thank you!

@christianlempa

2 жыл бұрын

Thanks!

thanks for this video. it helped me a lot!

@christianlempa

11 ай бұрын

Glad it helped!

Great, thanks! Please add to your next episodes list: Backup management, if it is Borg, it will be great

@christianlempa

3 жыл бұрын

Great suggestion!

great job man!

@christianlempa

2 жыл бұрын

Thanks!

¡¡Thanks a lot!! After many research finally got to your video and solved my sites ssl conection errors.

@christianlempa

Жыл бұрын

You’re welcome ☺️

Master class content

@christianlempa

2 жыл бұрын

Thanks :D

Great stuff. Thanks

@christianlempa

3 жыл бұрын

Thanks man!

Excellent!

@christianlempa

2 жыл бұрын

Thx!

thank youuuuuu sooooo muchhhhhhhhh I am trying for last 2 days day and night :-( for this your really really great thank you sooooo much :-)

great video, thanks!

@christianlempa

2 жыл бұрын

Glad you liked it!

so much. Can’t wait to start making soft.

I've attempted to learn nginx like 4 times and this was the first video that mentioned that you can just define multiple server blocks. I feel really dumb right now, especially since this video is also already 2 years old, so I probably could've found it the first time.

Life saver !

Thank you😀

Another interesting topic: how to use names instead of IP addresses in your LAN Thanks!

@christianlempa

3 жыл бұрын

Great suggestion, thanks!

Amazing video... رائع جدا 😍😍😍😍

@christianlempa

2 жыл бұрын

Thanks! ;)

Nice :D

Great video Chris! Can you show how to configure Nginx on a container to reverse proxy other containers?

You helped me a buch :)

@christianlempa

2 жыл бұрын

That's great, glad you like it :)

ore 1 day looking for a app that work, finally i found

As always good stuff, really enjoy the content this channel will grow mark my word. Please make a video also on traefik, 1 ip with 2 or more container or Web apps. That will help us home users who can get only 1 ip from their ISP Otherwise hack on !!!!

@christianlempa

3 жыл бұрын

Traefik is on my list, so that will fit very well with my future plans! Thank's for the great suggestion man!😀

Hi Christian, excellent video. Perhaps in a future video you could do what I'm setting out to set up for myself: nginx reverse proxy with letsencrypt docker container that is able to serve up a site on a separate server (separate machine, IP, OS, etc), as well as from docker containers on the same docker host. I'm still trying to get my head around what I need to accomplish it as I'm a docker newbie myself.

@christianlempa

3 жыл бұрын

Hey man, I've done some video about portainer and nginx proxy manager, which both is about docker. Maybe this is what you need :)

@dkryptonut

3 жыл бұрын

@@christianlempa Great! I will take a look, thank you!

thanks!!

@christianlempa

Жыл бұрын

You're welcome!

i wanna see the wildcard cert video, sounds pretty gamer

i love you man

@christianlempa

2 жыл бұрын

Haha thx

love u

Thank's

@christianlempa

3 ай бұрын

You're welcome :)

Nice tutorial. Yes pls show us how to add wildcards and how to add multiple website configuration. Just btw, this certbot is limited to 5 renews per day, if your encryption isnt working and you already tied 5 times unssuccessfuly, it still counts as a try. You will have to wait a day. You dont understand how many times I tried before finding that out 🤣

@christianlempa

3 жыл бұрын

Thank you so much for the feedback! I think multiple website configuration is really a great topic, also in combination with wildcard certs, so stay tuned :)

@dricci

7 ай бұрын

@@christianlempa Did you ever create a video for multi site nginx with wildcard? I wasn't able to find it searching. Thank you!!

Great tutorial. Excellent tutorial. Simple and clear. Now, I have a question. When the reverse proxy must redirect to several servers within a local intranet, I understand that the communication between the reverse proxy and each of the web servers on the local intranet must be done through http (and not https). But wouldn't that be unsafe?

Excellent tutorial. Is there a way to tell certbot to allow both http and https

Aaaaah I want this tutorial but with Docker so I can put it in my docker-compose homelab

wildcard video please..really an effective one

@christianlempa

3 жыл бұрын

I did a video on wildcard certs on npm. Hope that is what you are looking for

Thanks for this video! Can you show some more complicated configuration with "IF" and other conditions? I find IF to be vvery problematic in Nginx

@christianlempa

3 жыл бұрын

I will soon make a video about nginx multi-site configuration with wildcard certs, I also will put some other location recommendations in there. Don't know if this is what you're asking for but if you have a specific question you may also check out our discord community, I'm sure we can help you :)

Letsencrypt is limted to 5 renews per 7 days. If you are trying to issue certs after 5 times even if failed, wait 1 week or use a different domain.

But the video is very cool😊

Hello, Christian, I have docker&portainer installed on my server. Now I want to use nginx as a reverse proxy. So the question is: do I need to install nginx on Ubuntu or deploy the container on docker?

Hello, Excellent videos. I ask you for advice on the following: I have wordpress installed on amazon linux 2 with nginx, mounted an EFS and an RDS. Connect an ALB to the instance, the instance can be accessed only from the ALB on port 80. All good if I access the ALB on port 80, but when I install the ssl certificate on the ALB, the page generates mixed content (Mixed Content: The page at '' was loaded over HTTPS, but requested an insecure stylesheet ''.)

I'm new to the topic, new to nginx and using it to configure reverse proxies. I think I'm mostly in the target audience for this video. I've noticed something very strange in my searches for information so far, and this video is a good example. Up-front acknowledgement that nginx can be installed on a variety of operating systems, followed by a demonstration of configuring it that only applies to Debian and Ubuntu, using directories (sites-enabled, sites-available) that are specific to the packaging of nginx for those operating systems. And (apparently, I'm discovering) there are subtle differences in how they're used versus the standard directories (conf.d, default.d) you'd find elsewhere. I imagine plenty of people, including the presenter here, already understand the differences, but then such people are less likely to be in the target audience for this material. Why this popular assumption that nginx == ubuntu (again, not only here), and thus the assumption that only ubuntu-specific configuration needs to be covered?

So apparently cert bot is a snap now do we still need the python module to generate the certs?

In this example For your domain name which domain name service provider you had gone for

What I do now when I want to use the Reverse Proxy only for the incoming host but I want/must request the LE-SSL Certs in the machine where the web application is running?

Awesome!! Thanks for the video!! I just have one question: what do I need to do if I want to have access to a web app and also a website, in this case, the default nginx web page? I noticed in this tutorial that now, when you go to the website, it is redirected to the Python simulated web app, but what about the nginx default webpage? How do you get to that now?

@christianlempa

2 жыл бұрын

Thank you so much! :) Have you looked into my NPM and Traefik videos? Might be an easier approach!

the way you get a domaine is unclaire for me is from lets encrypt certificate ? or from a dedicated domaine server ? thanks for your effort

@christianlempa

2 жыл бұрын

Np ;)

I'm new to linux, but as far as i know, sudo apt update only returns a list of what needs updating, sudo apt upgrade is the command required to actually do the upgrade?

Hello, Great tutorial! I am having a strange issue though where i followed your steps and it works great, however even though i have it pointing to my sub-domain, it also seems to be forwarding it to my top level domain as well, not sure why..

@christianlempa

2 жыл бұрын

Hey thanks, maybe check on our Discord and share you config.

Hallo Christian, danke für dieses Video. Allerdings hatte ich gehofft, Du zeigst wie man ein wildcard certificate einbindet und man sich so ein certificate für jede subdomain erspart. In meinem Fall habe ich Nextcloud auf Ubuntu server schon mit nginx installiert und möchte diesen jetzt mit einem wildcard certificate versehen, um auf Navidrome und den turnserver (für Nextcloud Talk) zugreifen zu können. Auf Truenas core funktionierte das wunderbar, für Ubuntu bin ich offensichtlich zu blöd.

what policy do i put on the firewall to direct request to reverse proxy?

too many things not explained

Hi, in lets encrypt site it said to install certbot through snap… what are the difference by using apt get then? I cannot renew cert from installing through snap and no mention for installing python3-certbot-nginx

How did nginx open in vscode? Can someone elaborate

Nice video! Unfortunately it doesn't work for me and I can't understand why. I have a domain with cloudflare and the challenge fail the authorization. Any idea? Thanks

Why use Visual Studio? Isn’t it for programming?

Excelent video Christian. I configured an nginx with lets encrypt and worked fine. The only problem I had is with css . The frontend I am proxying is not loading CSS , but if I go directly without passing through nginx the CSS load perfectly. Does anybody know how to solve this issue. The frontend is angular and is hosted on apache. Thanks in advance.

Hi Christian, greetings from Colombia, I have a question..do Ihave to install the ssl certificate in the server that it has been proxyed ? thanks in advanced

@christianlempa

3 жыл бұрын

You can, but usually you just install the SSL cert on the reverse proxy, that terminates the connection. Then you don't need to install the cert on the read website/app itself.

I love u

Another problem I have ... If within the local intranet, I want to access the web server (which is part of the same intranet), I do not want the path to be through the Internet, via a reverse proxy, to finally reach the server that was within the same intranet ... So, I thought about deploying a Split-Brain DNS, where the public address is resolved to an intranet IP, but for this, I need to have the LetsEncrypt certificate, on the local server (in addition to the reverse proxy ) ... again, the only thing I can think of is to export via NFS the directory that contains the certificates in the reverse proxy, to be able to mount them on the corresponding web server ... Is that so, or are other techniques used?

I cannot ever get a reverse proxy to work. Do I need to install nginx on EVERY container that I want to expose or can I install nginx proxy manager on 1 virtual machine and use that for every other virtual machine I want to expose

hey Christian, i'm trying to setup a reverse proxy Nginx to catch and route to a torrent web server internally and cant figure how, can you lend a hand?

Can you make a video on how you connected to your ssh server file system using Visual Studio Code. I installed Remote SSH in VS Code and logged in under the normal user but I can't login as the root user so I'm getting an error when I try to delete the default file under sites-enabled.

can you do one on a mac

so I just tried this with my docker services, and I tried changing the locations for each of my apps. The first one, emby, works fine if try to access them with ipaddress/emby. However, even though the rest of the services are configured using the same syntax, they don't appear. They don't give me a 404 error either is there a limit on subsites you can configure or something?

Will this work for multiple apps/websites? Is it just a case of adding a second server block for the second app/website? And can you get 2 certificates the same way?

@christianlempa

2 жыл бұрын

Yes you can do all this, if you configure it

Mine looks notNice tutorialng like the way you guys started it would be amazing if soone told how to get the multiple tracks

And another question I have about it ... If my website uses HTTP2 (which requires SSL), can I point the reverse proxy to https: //mysslserver.intra.local/? (Assume that an SSL certificate issued by a local Root-CA trusted by both the webserver and the reverse proxy has been correctly configured on the destination web server).

why would someone want to hide the real server? I've seen this software used by pirate video sites to hid the video host.

I need wildcard tutorial please

Can you please advice how to set up Nginx Proxy for Java app what is running on Ubuntu alongside of Nginx webserver? I made the proxy work for normal TCP 80/443 but I have problem to add there UDP, as the app needs access to TCP/UDP 80/443. I made proxy to localhost:5001 and localhost:5002 But I cannot find any help on internet how to also use UDP

I have a question. Does this work with a website inside an Intranet network, that is not reachable from the outside internet ? I still want to secure all requests to be encrypted.

@christianlempa

4 ай бұрын

sure that works regardless of the internet or local access, check out my other tutorials about dns server, letsencrypt and traefik. I'm all running it locally

How to reverse proxy for azure web apps

Hello, I have a reverse proxy with Nginx and a webserver with apache2. The webserver is working well when running "alone" ... But if i add the reverse proxy on the top, it show me the default debian web page .... Any idea ?

@nope6417

Жыл бұрын

writing the full path of the DocumentRoot of my webserver in the "proxypass" seems to work :)

Dear Christian Lempa, I have problems. Safari browser can not connect my website. It's only connect pass with 80 port, no connect with 443 port meanwhile, chorme, firefox ...all connect with my website. I had tried many methods, but it is fault. Please, you and everyone help me. Thank you so much

why I can not double like?

I need to find someone to help me get set up with a reverse dns proxy to 2 separate Webflow sites. Can anybody help?

Do you have a tutorial for setting up a NGINX as reverse proxy for more than one web server behind it? Note the multiple web server are on the same system, in other words, they share the same IP address but are under folders of different users. For example, /home/user1/, /home/user2/ . Thanks

@christianlempa

Жыл бұрын

Not really, I started using other apps for rev proxy and load balancing that integrate better with my docker and k8s setup. Maybe take a look at my traefik videos :)

Can it be installed on Sophos XG? Or how can reverse proxy be installed?

@christianlempa

2 жыл бұрын

You can use XG as a reverse proxy, but not install software on it.

can I secure my web app without a web server like nginx or apache or nginx is required for ssl

@christianlempa

3 жыл бұрын

You can technically do all this stuff in your app, but usually it's easier to use something like a reverseproxy. Check out my video about nginx proxy manager, it's really easy.

@hamadaparis3556

3 жыл бұрын

@@christianlempa awesome thanks bro

I managed to get it working, but after the last step my nginx returns "404 Not Found nginx/1.14.0 (Ubuntu)" when I visit the site, even though the container is still running in docker-compose. Do you know what could cause this?

@christianlempa

3 жыл бұрын

That's usually a DNS, Domain issue.