825071750290210916 #install

jolly-london-20127

09/22/2022, 8:08 PM

is there another reverse proxy on the same box?

brainy-tent-31736

09/22/2022, 8:09 PM

no, but in the overall network

brainy-tent-31736

09/22/2022, 8:09 PM

I am planning to use netmaker to temporarily incorporate vservers in my internal network

brainy-tent-31736

09/22/2022, 8:10 PM

Since I only have 1 ipv4 i manage certificates on another system and run traefik with certs from my local CA

brainy-tent-31736

09/22/2022, 8:11 PM

I found my error

brainy-tent-31736

09/22/2022, 8:11 PM

I used your template for nginx-proxy-manager but forgot to change the forward_scheme from http to https

brainy-tent-31736

09/22/2022, 8:18 PM

I wouldve expected nginx to throw an error 500 there, since the url http'ed to https, but I guess nginx did report this poorly...or maybe trafik multiplexes port 443?

jolly-london-20127

09/22/2022, 8:19 PM

not sure

jolly-london-20127

09/22/2022, 8:19 PM

did the change fix it?

brainy-tent-31736

09/22/2022, 8:20 PM

yes

brainy-tent-31736

09/22/2022, 8:20 PM

you could argue, that it was a stupid mistake. Nevertheless, thank you for your time

jolly-london-20127

09/22/2022, 8:26 PM

sounds like we need a docs update?

brainy-tent-31736

09/22/2022, 8:27 PM

I don't know what you are referring to

brainy-tent-31736

09/22/2022, 8:28 PM

I just botched copy and changing the reverse-proxy settings given. I don't know, if theres something wort documenting

jolly-london-20127

09/22/2022, 8:29 PM

oooh gotcha ok, I thought we had the wrong forward_scheme in docs

brainy-tent-31736

09/22/2022, 8:30 PM

I think your guide expects a localhost reverse proxy

brainy-tent-31736

09/22/2022, 8:30 PM

therefore http is appropriate

brainy-tent-31736

09/22/2022, 8:30 PM

I am running a central proxy within my network using tls, therefore I had to change forward_scheme and port

jolly-london-20127

09/22/2022, 8:34 PM

ahhh yes ok, thank you for clarifying

brainy-tent-31736

09/22/2022, 10:06 PM

Just another question: Is it possible to change the default portrange for netmaker right now?

jolly-london-20127

09/22/2022, 10:06 PM

it is not

brainy-tent-31736

09/22/2022, 10:07 PM

ok, thanks 🙂

average-battery-79447

09/22/2022, 11:11 PM

is there a process for seeing why traffic from an egress node is not passing traffic?

average-battery-79447

09/23/2022, 12:03 AM

I have wireguard install on my phone and I have the server running in AWS, I created a new network to connected to a different remote office but I can not access it via egress

average-battery-79447

09/23/2022, 12:08 AM

I can ping from phone to netmaker-1 IP, I can ping the node ip of netclient and the lan ip ens18 but I can not ping the gateway

average-battery-79447

09/23/2022, 12:08 AM

or other computers

few-carpenter-24293

09/26/2022, 4:39 PM

I installed using the instructions on github

Get a cloud VM with Ubuntu 20.04 and a public IP.
Open ports 443 and 51821-51830/udp on the VM firewall and in cloud security settings.
Run the script: wget -qO - https://raw.githubusercontent.com/gravitl/netmaker/master/scripts/nm-quick.sh | sudo bash

few-carpenter-24293

09/26/2022, 4:41 PM

root@vpn:~# docker ps
CONTAINER ID   IMAGE                              COMMAND                  CREATED          STATUS          PORTS                                                                             NAMES
8dfc68ab6a19   coredns/coredns                    "/coredns -conf /roo…"   53 minutes ago   Up 53 minutes   53/tcp, 53/udp                                                                    coredns
0611a7a20db2   gravitl/netmaker-ui:v0.16.0        "/docker-entrypoint.…"   53 minutes ago   Up 53 minutes   80/tcp                                                                            netmaker-ui
1a0a1c002e7b   eclipse-mosquitto:2.0.11-openssl   "/docker-entrypoint.…"   53 minutes ago   Up 53 minutes   1883/tcp, 8883/tcp                                                                mq
6c8838965bad   traefik:v2.6                       "/entrypoint.sh --ce…"   53 minutes ago   Up 53 minutes   80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp                                     traefik
c05bcf487d2b   gravitl/netmaker:v0.16.0           "./netmaker"             53 minutes ago   Up 53 minutes   8081/tcp, 0.0.0.0:51821-51830->51821-51830/udp, :::51821-51830->51821-51830/udp   netmaker
root@vpn:~# docker exec -it netmaker /bin/bash
bash-5.1# wg show
bash-5.1#

few-carpenter-24293

09/26/2022, 4:43 PM

[netmaker] 2022-09-26 15:49:20 error running command: wg-quick up /etc/netclient/config/nm-netmaker.conf 
[netmaker] 2022-09-26 15:49:20 Warning: `/etc/netclient/config/nm-netmaker.conf' is world accessible
[#] ip link add nm-netmaker type wireguard
[#] wg setconf nm-netmaker /dev/fd/63
[#] ip -4 address add 10.101.255.254 dev nm-netmaker
[#] ip link set mtu 1280 up dev nm-netmaker
[#] `iptables -A FORWARD -i nm-netmaker -j ACCEPT ; iptables -A FORWARD -o nm-netmaker -j ACCEPT ; iptables -t nat -A POSTROUTING -o nm-netmaker -j MASQUERADE ;  ; iptables -A FORWARD -i nm-netmaker -j ACCEPT ; iptables -A FORWARD -o nm-netmaker -j ACCEPT ; iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE ; `
/usr/bin/wg-quick: command substitution: line 295: syntax error near unexpected token `;'
/usr/bin/wg-quick: command substitution: line 295: `iptables -A FORWARD -i nm-netmaker -j ACCEPT ; iptables -A FORWARD -o nm-netmaker -j ACCEPT ; iptables -t nat -A POSTROUTING -o nm-netmaker -j MASQUERADE ;  ; iptables -A FORWARD -i nm-netmaker -j ACCEPT ; iptables -A FORWARD -o nm-netmaker -j ACCEPT ; iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE ; '
[#] ip link delete dev nm-netmaker 
[netmaker] 2022-09-26 15:49:20 waiting for interface...

I ssee this over and over in the logs for the entmaker container

jolly-london-20127

09/26/2022, 4:52 PM

```rootvpn~ docker ps