Our core mission is driving the future of distributed cloud computing. The infrastructure of the internet is siloed and byzantine. We can do better.

GRAVITL

Can caddy be used to represent the 8883 of MQ?

haproxy can, i don't see why caddy couldn't

Ah ... Im still on 0.12.1. Do I need to rip out and replace to enjoy 0.14.0? 🙂

You could attempt an upgrade but unless you’re running some mission critical stuff, it’ll be easier to rip and replace

the upgrade guide from 12 13 should work for 12 to 14 if you do need to do it

It might be safer/quicker to rip and replace

is there a way to let netclient accept a self signed certificate?

for what?  api or mq?   mq currently does use self signed certs

you would probably run into issues using the UI as most browsers don't play well with self-signed certs

MSI Installer: https://fileserver.netmaker.org/v0.14.0/netclient_x86.msi

I used this installer, but there was a UI in the installation process, but I didn't find the UI I used,

I was playing around with netmaker, installed it inside docker network 172.22.0.0/16, and created a network inside netmaker as 192.168.3.0/24 with one ext client on my mobile phone and one node using the new macos installer. Was able to join the network and it shows as healthy. Then I wanted to configure the netmaker-1 (192.168.3.254) to egress the local docker network 172.22.0.0 which works on mobile, but not on macos.

When I look at the routing table on macos I can see the route to 192.168.3.0, but not to 172.22.0.0

Is that because of "The Netclient specifically ignores gateways that overlap with local ranges"

Possibility, what are the existing networks on the mac

```
Internet:
Destination        Gateway            Flags           Netif Expire
default            192.168.1.1        UGScg             en0
127                127.0.0.1          UCS               lo0
127.0.0.1          127.0.0.1          UH                lo0
169.254            link#7             UCS               en0      !
192.168.1          link#7             UCS               en0      !
192.168.1.1/32     link#7             UCS               en0      !
192.168.1.1        18:e8:29:44:d7:a6  UHLWIir           en0   1197
192.168.1.2        b8:27:eb:ed:1e:7a  UHLWI             en0   1193
192.168.1.3        0:11:32:89:1b:69   UHLWIi            en0   1177
192.168.1.4        0:11:32:89:1b:69   UHLWIi            en0    210
192.168.1.95       70:2c:9:ec:49:b9   UHLWI             en0    457
192.168.1.105/32   link#7             UCS               en0      !
192.168.1.255      ff:ff:ff:ff:ff:ff  UHLWbI            en0      !
192.168.3.1        utun3              UHS             utun3
224.0.0/4          link#7             UmCS              en0      !
224.0.0.251        1:0:5e:0:0:fb      UHmLWI            en0
239.255.255.250    1:0:5e:7f:ff:fa    UHmLWI            en0
255.255.255.0      192.168.3.1        UH              utun3
255.255.255.255/32 link#7             UCS               en0      !
```

Does wg show have the 172 network in allowed ips

it just shows this:
```
interface: utun3
  public key: XXXXXX
  private key: (hidden)
  listening port: 56360
```

```
sudo wg showconf utun3
[Interface]
ListenPort = 56360
PrivateKey = XXXXXX
```

and that is the conf file that was generated for an ext client?

no, this is the output on my mac. I installed wireguard-go and netclient 0.14 and let it connect with an access token

If you do a netclient pull does the config get updated

the config for ext clients is as follows:
```
[Interface]
Address = 192.168.3.2/32
PrivateKey = XXXX
MTU = 1280
DNS = 172.22.0.5

[Peer]
PublicKey = XXXX
AllowedIPs = 192.168.3.0/24,172.22.0.0/16
Endpoint = XXXX:51821
PersistentKeepalive = 20
```

```
sudo netclient pull -vvv
Password:
[netclient] 2022-05-21 21:00:46 No network selected. Running Pull for all networks.
[netclient] 2022-05-21 21:00:56 waiting for interface...
[netclient] 2022-05-21 21:00:56 interface ready - netclient.. ENGAGE
[netclient] 2022-05-21 21:00:56 pulled network config for home
[netclient] 2022-05-21 21:00:56 register at https://api.XXXX:443/api/server/register
[netclient] 2022-05-21 21:00:56 certificates/key saved
[netclient] 2022-05-21 21:00:57 reset network and peer configs
```

```
sudo netclient list -vvv
{"networks":[{"name":"home","node_id":"XXX","current_node":{"name":"MacBook-Prolocal","interface":"nm-home","private_ipv4":"192.168.3.1","public_endpoint":"XXX"},"peers":[]}]}
```

You could try the homebrew installer and see if that works better

uninstalled wireguard-tools, wireguard-go and netclient, and just ran install netclient which installed the other 2 again

Who can tell me how to find this GUI? I haven't found it in win11 or Ubuntu

In your installation Guide (https://docs.netmaker.org/quick-start.html#prerequisites) you mention that CloudFlare has limitations on subdomains. What exactly is the limitation? I'm not using the CloudFlare Proxy.

users have noted that using multiple subdomains (e.g. broker.netmaker.mydomain) wont work by default, but that a single subdomain will (e.g. broker.mydomain)

I don't use cloudflare so just wanted to point that out as a potential limitation

https://discord.com/channels/825071750290210916/825071750290210919/958724430505312337

in a separate issue, users have noted limitations around gRPC with cloudflare. However, we stopped using gRPC so that should be fine now

It seems that this only applies if using the Cloudflare Proxy, because if you disable it CloudFlare only acts like a normal nameserver. No certs, nothing, Netmaker uses normal ACME then

ok, we should be more specific in docs then

After a few minutes, it turns into a yellow warning and then a red error, but the three clients can ping each other or the server netmaker

Netclient daemon is not checking in via mqtt.  Is the daemon running?

The version number of netclient in win11 displays n / A, but it does not display 0.14.0 correctly. In Ubuntu, the version number of netclient is displayed correctly

https://gist.github.com/mattkasun/face2a7c1f32031a2126ff7243caad12

The only problem is the win11 client. The Ubuntu client is normal. So I think the problem should be in the Windows client.

The gist has troubleshooting steps for client

Hello, is Netmaker compatible with custom OAuth providers?

no not today, just GitHub, Google, and Azure

No not today, just Google, GitHub, and Azure

I saw #636 issue on Github https://github.com/gravitl/netmaker/issues/636