problem with nginx proxy manager and cloudpanel

[fifisoft57]

hello

since I upgraded to version 2, my nginx proxy manager can no longer access the site hosted on cloupanel, if I redirect directly to the ip of my cloudpanel server no problem, but when I have to go through my proxy server, it does not work, while with version 1 of cloudpanel no problem

Thank you for your help

[cloudpanel-io]

With the latest NGINX update, the following file has been added:

/etc/nginx/sites-enabled/default.conf

It's a default vhost to prevent direct IP access.

You should not have any issues with your proxy server, make sure to send the $host header.

[ardesoft]

Hi, I have the same problem. I have a proxmox homelab, which I installed docker and cloudpanel. NPM is running as a container in docker and my websites is in cloudpanel. My problem is if I forwarded port 80/443 on my router to one of them, I can't access the instances installed in docker or cloudpanel. To be clear, If I forward the port to Docker/NPM's IP my websites in CloudPanel are not accessible, the same when I forwarded the port to CloudPanel NPM is irrelevance. I hope you can help me with this issue. By the way I'm a noob/beginner of all the above mentioned technology.

[BrandonSanders48]

did you ever find a fix?

[ardesoft]

Yup, but I don't know if I did it correctly. I forwarded $host header from NPM default server and in cloudpanel /etc/nginx/sites-enabled/default.conf I access my SSL cert/key and turned off handshake.

[ardesoft]

This is my configuration file in NPM:

upstream webhosts {
server 10.8.19.21:80;
}
server {
listen 80 default_server;
listen [::]:80 default_server;

    set $forward_scheme "http";
    set $server "207.0.0.1";
    set $port "80";

    server_name cloudpanel;
    access_log /data/logs/fallback_access.log standard;
    error_log /data/logs/error.log crit;

    location / {
            proxy_set_header        Upgrade $http_upgrade;
            proxy_set_header        Connection "upgrade";
            proxy_set_header        Host $host;
            proxy_set_header        X-Real-IP $remote_addr;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header        X-Forwarded-Proto $scheme;
            proxy_pass              http://webhosts;
   }

server {
listen 443 ssl default_server;
listen [::]:443 ssl default_server;

    set $forward_scheme "https";
    set $server "207.0.0.1";
    set $port "443";

    server_name cloudpanel;
    access_log /data/logs/fallback_access.log standard;
    error_log /dev/null crit;
    ssl_certificate /data/custom_ssl/npm-7/fullchain.pem;
    ssl_certificate_key /data/custom_ssl/npm-7/privkey.pem;
    ssl_protocols TLSv1.3;
    ssl_ciphers "HIGH !aNULL !eNULL !EXPORT !CAMELLIA !DES !MD5 !PSK !RC4";
    ssl_prefer_server_ciphers on;

    location / {
            proxy_set_header        Host $http_host;
            proxy_set_header        X-Real-IP $remote_addr;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header        X-Forwarded-Proto $scheme;
            proxy_pass      https://10.8.19.21;
    }

    if ($request_method !~ ^(GET|HEAD|POST)$) {
            return 404;
    }

}