https://netmaker.org logo
Powered by
netmaker
  • o

    orange-student-86378

    01/01/2023, 9:44 PM
    i feel self host is way more secure
  • a

    agreeable-apartment-18181

    01/01/2023, 9:44 PM
    yeah and now its sitting on a box in dmz that has access to home assistant atm only.
  • o

    orange-student-86378

    01/01/2023, 9:44 PM
    if you know what you are doing
  • a

    agreeable-apartment-18181

    01/01/2023, 9:45 PM
    I somewhat know what I am doing architecturally but putting it in practice is what im struggling with.
  • a

    agreeable-apartment-18181

    01/01/2023, 9:49 PM
    I ran it again
  • a

    agreeable-apartment-18181

    01/01/2023, 9:50 PM
    lets see how the caddy setup goes this time around.
  • o

    orange-student-86378

    01/01/2023, 9:50 PM
    unsure if your install is borked or not. i would run command like netstat or curl to check if something is actually listening on 443 from the netmaker itself that way you will know if problem is on netmaker or opnsense
  • a

    agreeable-apartment-18181

    01/01/2023, 9:51 PM
    it can't do the caddy install im gonna kill it see if something is running on port 443
  • o

    orange-student-86378

    01/01/2023, 9:54 PM
    during setup i left all ports open. i only ran hardening rules after everything worked fine
  • o

    orange-student-86378

    01/01/2023, 9:55 PM
    and curl on port 443 ?
  • a

    agreeable-apartment-18181

    01/01/2023, 9:56 PM
    im going to restore snapshot i have before i ran the script
  • a

    agreeable-apartment-18181

    01/01/2023, 9:56 PM
    see if same thing is running after that
  • o

    orange-student-86378

    01/01/2023, 9:57 PM
    oh maybe u should add https:// in front of localhost....no idea actually lol
  • o

    orange-student-86378

    01/01/2023, 9:57 PM
    and maybe --insecure option or something also
  • o

    orange-student-86378

    01/01/2023, 9:57 PM
    since cert will be invalid for localhost
  • a

    agreeable-apartment-18181

    01/01/2023, 9:58 PM
    the snapshot restore shouldn't have anything running on it at all. All i did was ran update, upgrade and added a sudo user and removed root from ssh access.
  • a

    agreeable-apartment-18181

    01/01/2023, 10:00 PM
    ok only 22 now
  • a

    agreeable-apartment-18181

    01/01/2023, 10:00 PM
    only thing installed is docer and wireguard plus whatever ubuntu server comes with now.
  • a

    agreeable-apartment-18181

    01/01/2023, 10:06 PM
    nope doesn't work
  • a

    agreeable-apartment-18181

    01/01/2023, 10:08 PM
    I think i found the problem the firewall doesn't know this network going outbound some its denying it.
  • a

    agreeable-apartment-18181

    01/01/2023, 10:08 PM
    I am sure that is from the docker container.
  • a

    agreeable-apartment-18181

    01/01/2023, 10:12 PM
    can you tell me what 172. address space it uses if any others besides that one?
  • a

    agreeable-apartment-18181

    01/01/2023, 10:12 PM
    inside the docker container.
  • o

    orange-student-86378

    01/01/2023, 10:14 PM
    mmmm i dont know that maybe a command like "ip show addresses" will show you the networks ?
  • a

    agreeable-apartment-18181

    01/01/2023, 10:15 PM
    yeah i don't have it fully installed yet to see its still trying.
  • o

    orange-student-86378

    01/01/2023, 10:15 PM
    ooof i dont have access to my install now
  • a

    agreeable-apartment-18181

    01/01/2023, 10:15 PM
    ill see if i can find it in the docs what the ip range is.
1...206207208...220Latest