I just installed netmaker server on my kubernetes cluster. But somehow both the api and ui ingress is not working using the nginx inc ingress controller. Both giving me 502 bad gateway error. Anyone can help please?

Nm on k8s

hey gang, should the mqtt be showing connects and disconnects from each client every few minutes?

2022-07-24T15:05:13.304516181Z 1658675113: Client aOSZa1yHiPr8Yp6GljnDeCU disconnected.
2022-07-24T15:05:13.283141183Z 1658675113: New client connected from 172.19.0.2:58454 as aOSZa1yHiPr8Yp6GljnDeCU (p2, c1, k30, u'maycocksserver').
2022-07-24T15:04:56.940564600Z 1658675096: Client Z5UlxHcK1ZCspoyqVOIWBVn disconnected.
2022-07-24T15:05:13.253612502Z 1658675113: New connection from 172.19.0.2:58454 on port 8883.
2022-07-24T15:04:56.931437602Z 1658675096: New client connected from 172.19.0.2:58416 as Z5UlxHcK1ZCspoyqVOIWBVn (p2, c1, k30, u'Win2012R2').
2022-07-24T15:04:56.921835998Z 1658675096: New connection from 172.19.0.2:58416 on port 8883.
2022-07-24T15:04:46.738194160Z 1658675086: New connection from 172.19.0.2:58408 on port 8883.
2022-07-24T15:04:46.768415844Z 1658675086: New client connected from 172.19.0.2:58408 as Pe1ZsYACu94UMtqKMPHKFVc (p2, c1, k30, u'martinsserver').
2022-07-24T15:04:46.795673282Z 1658675086: Client Pe1ZsYACu94UMtqKMPHKFVc disconnected.
2022-07-24T15:04:38.305410238Z 1658675078: Client IIK6ybrSXu5ZhR4Qrc4p46i disconnected.
2022-07-24T15:04:38.285678970Z 1658675078: New client connected from 172.19.0.2:58400 as IIK6ybrSXu5ZhR4Qrc4p46i (p2, c1, k30, u'Win2016').
2022-07-24T15:04:38.261946899Z 1658675078: New connection from 172.19.0.2:58400 on port 8883.
2022-07-24T15:04:26.904450924Z 1658675066: Client B6bhMiLG3ZMPOSINDhZrJTK disconnected.
2022-07-24T15:04:26.902355220Z 1658675066: New client connected from 172.19.0.3:36578 as B6bhMiLG3ZMPOSINDhZrJTK (p2, c1, k60).
2022-07-24T15:04:26.901768039Z 1658675066: New connection from 172.19.0.3:36578 on port 1883.

Join duplicate records

making the wireguard node an egress

@cool-garden-44589 you did this on opnsense or pfsense ?

Hi, I beg your pardon for my English. I'm a newbie, so please don't be harsh. I have a VPS (Debian Bullseye) with one public ip address. As well as a local home server linux mint 21 behind NAT without a public ip address. Traccar will be installed on the home server. I wanted to access Traccar using netmaker. I need access through the public ip address of the VPS on port 8082. And also the truck should receive data from gps trackers. To do this, I will open ports: 5149, 5027 on the home server. In the settings of the gps tracker, I use the public ip and ports: 5149, 5027. Can I accomplish this task if I install netmaker on a VPS and install the Wireguard client on my home server? Can you please tell me how I need to configure netmaker for this task? Willing to provide additional information. Thanks

I've configured azure-ad oauth but I'm getting "No reply address provided". Settings are configured correctly:

AUTH_PROVIDER: "azure-ad"
      CLIENT_ID: "REDACTED"
      CLIENT_SECRET: "REDACTED"
      SERVER_HTTP_HOST: "api.netmaker.example.com"
      FRONTEND_URL: "https://dashboard.netmaker.example.com/"
      AZURE_TENANT: "REDACTED"
      OIDC_ISSUER: ""

morning, ive been trying since yesterday to get the server running properly, all my agents show as error after a while, bt the connections seem to work mostly, ive noticed that theres broker error messages, running curl -v to my broker.server.com says ssl cert fails....ive tried recreating the traefik docker, deleted the existing acme.json and still seems to fail for broker, while api.server gets a valid ssl....anyone have a suggestion? 🙂 thx

morning ive been trying since yesterday

Hello! the new PUBLIC_IP_SERVICE variable should work with the server? For example in docker i set a new environment variable like: PUBLIC_IP_SERVICE=http://checkip.amazonaws.com But the server node is not updating it's endpoint IP.

this the apropriate place to ask about a dns issue?

this the apropriate place to ask about a

Does netmaker automatically configure letsencrypt or something? I installed but I don't see anything about setting up SSL for the server

Hello, I am having a small problem that I assume has an easy fix. I am trying to set up an egress node on gcloud, so i can connect to rds and other resources in gcloud However, when I set up my node it stops being able to communicate with gcloud services on its normal interface, which is ens4 everything just times out Which also means when I try to connect to these services from other nodes/clients, they also timeout because they get to my gcloud node and just get stuck because it cant seem to figure out what to do next.

Hello I am having a small problem that I

Not as of yet

I didn't see anything mentioned on the github issues for this issue, but I'm following the quick install instructions using docker setting up netmaker on debian bookworm. I getting an error on startup:

[netmaker] Fatal: Unable to initialize iptables on host: lookup coredns on 10.89.0.1:53: read udp 10.89.0.7:34006->10.89.0.1:53: i/o timeout

Looking at the coredns container logs it's saying

loading Caddyfile via flag: open /root/dnsconfig/Corefile: no such file or directory

and then dying.

Is netmaker supposed to autogenerate the coredns Corefile?

Or is there some base dnsconfig stuff that I can use to seed the startup?

I'll also note that I'm using podman and podman-compose rather than the docker tools, but I don't think that should too severely affect the issue

Well just mounting the docker volume and touching Corefile avoids the coredns container from going into a crash loop, but I still get the same error in the netmaker logs

How do I take a backup and move the server onto another host? In this case I'm downgrading a DO droplet. I can't see anything in the docs about where the data is stored

I didn t see anything mentioned on the

Hello. I've been going through the doc and can't find mention of server side "hooks" to execute something when a client connects. Does that exist ?

I removed "iptables -t nat -A POSTROUTING -o nm-netmain -j MASQUERADE" from postup/down on the extry point of the external clients (as advised) in order to be able to see the original IP and not the IP of the ingress server... but it didnt work. I restarted netmaker docker and I still see the ingress server IP on the firewall.

Each EXT client has an IP of the network's subnet so Id like the external clients not to be NATed. Its better if each ext-client can be identified by their IP....

I created a fresh v0.15.1 server and connected two Linux clients. Neither client is getting any /etc/hosts entries for the mesh network. The Netmaker docker log shows the following repeating error: [netmaker] 2022-09-12 01:53:44 processed request error: unauthorized Any ideas?

How do I use the API to get/update the ACLs? Calls to

/api/networks/skynet/acls

give

{"Code":401,"Message":"unauthorized"}

And trying to authenticate using

/api/nodes/adm/stellaprod/authenticate

gets

{"Code":400,"Message":"crypto/bcrypt: hashedPassword is not the hash of the given password"}

How do I take a backup and move the