Reverse Proxy for Microsoft Exchange Server 2019

[jmccreary]

The only thing not working on my Nginx Proxy Manager setup is my Exchange server, I can access the webmail portion just fine. The problem is with outlook desktop clients, no matter what I do they won’t sign in. I believe it has something to do with the way the autodiscover sub-domain proxy is setup, but I have no idea how to configure this in on Nginx Proxy Manager. I can’t seem to find any information online about how to configure it.

I did find this setup for Nginx, but I’m not sure how this would transfer over to Nginx Proxy Manager.

server {
if ($host = $mail.domain.tld) {
return 301 https://$host$request_uri;
} # managed by Certbot

    listen 80;
    listen [::]:80;

    server_name $mail.domain.tld;
    return 404; # managed by Certbot

    ssl_verify_client       off;

}
server {

    listen [::]:443 ssl http2 ipv6only=on; # managed by Certbot
    listen 443 ssl http2; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/$mail.domain.tld/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/$mail.domain.tld/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    server_name $mail.domain.tld;

    ssl_verify_client       off;

    location /                              { proxy_pass https://$exchange_server; }
    location /owa                           { proxy_pass https://$exchange_server/owa; }
    location /exchange                      { proxy_pass https://$exchange_server/exchange; }
    location /ews                           { proxy_pass https://$exchange_server/ews; }
    location /mapi                          { proxy_pass https://$exchange_server/mapi; }
    location /rpc                           { proxy_pass https://$exchange_server/rpc; }
    location /oab                           { proxy_pass https://$exchange_server/oab; }
    location /autodiscover                  { proxy_pass https://$exchange_server/autodiscover; }
    location /Microsoft-Server-ActiveSync   { proxy_pass https://$exchange_server/Microsoft-Server-ActiveSync; }
    location /ecp                           { proxy_pass https://$exchange_server/ecp; }

    proxy_pass_request_headers on;
    proxy_pass_header Date;
    proxy_pass_header Server;

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;
    more_set_input_headers 'Authorization: $http_authorization';
    proxy_set_header Accept-Encoding "";
    more_set_headers -s 401 'WWW-Authenticate: Basic realm="$mail.domain.tld"';

    proxy_read_timeout 3600;

    proxy_buffer_size 128k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;

    access_log /var/log/nginx/$mail.domain.tld-access.log;
    error_log /var/log/nginx/$mail.domain.tld-error.log;

}

any suggestions?? Thanks in advance

[EffKay-muc]

I found a very similar file in the container under /data/nginx/proxy_host/number.conf

But I found no way, to edit that file with nano in the container (used the consol in portainer)

The "funny" part is, the EWS access worked for me until I updated NPM

[EffKay-muc]

In fact, it works with 2.9.2

[stanthewizzard]

Not an answer to your question but in my case
haproxy for exchange and remote desktop
everything else goes to NPM
If you found a solution to make it work with NPM. I'm interested

[PrieserMax]

How did you setup haproxy and Nginx Proxy Manager?
From external it is only possible to forward the ports to one host. So how did you open 80/443? Do you have multiple WAN IPs?
Freetings
Max

[chjud]

I would love to know the same as Max. Is the Haproxy first or the NPM first, could you share your config?

[Chrishan68]

Hi
I have the same problem. Everything is working except my Outlook client. During profile setup it is asking for credentials again and again and then it stops. I need to cancel setup.
In custom locations I setup every folder, but I think I need to add something to Advanced - Custom Nginx Configuration. But what? Is there any explanation what I can add?

I tried

upstream mail {
server 192.168.168.168:443;
ntlm;
sticky learn create=$remote_addr lookup=$remote_addr
zone=client_sessions:10m timeout=3h;
}

but this takes my host offline

[g-karpov]

You need this https://github.com/gabihodoroaga/nginx-ntlm-module

[gyd1]

@jmccreary
Is this your complete configuration of using nginx as a reverse proxy for Microsoft Exchange Server 2019?