Proxy with SSL enable

[JackJ]

**Operating system: Debian
**OS version: 10
Hello,

I have one server behind firewall which on the same LAN with my virtualmin server. Only virtualmin server facing the internet. I want to access this server (web access) using virtualmin’s ‘proxy website’ feature. This server dont have SSL, but i want to apply SSL for this server through virtualmin using Lets encrypt (means that the communication between virtualmin and this server is not secure, its ok since its only on local network) I tried configure virtualmin and i am able to reach this server, but without success if SSL enable. How to enable SSL for this kind of proxy? Thanks

[drguild]

This post is pretty much same as mine as I’m trying to do the same thing use lets encrypt on a internally hosted ssl service.

SSl via proxy to site

I’m using virtualmin to proxy to a web app Taiga and wondering how to get the letsencrypt SSL forwarded so I can access the page outside the network. The Taiga Guide is here. https://docs.taiga.io/setup-production.html#start-and-expose When trying to use the page I get, Proxy Error The proxy server could not handle the request Reason: Error during SSL Handshake with remote server The web app is hosted on a njinx server in a LXC container using this code as taiga.conf. Proxing is passing…

[JackJ]

Hi @drguild ,
Do you able to make it successful?

[drguild]

Still Trying to figiur it out here.

[drguild]

I did manage to make it work.
I had to enable self signed on the backend and ssl protocols in nginx.
You can see from my site in my thread.

[JackJ]

I am using Apache. BTW, u just create self sign cert?

[drguild]

My host is virtualmin so apache, then it goes to the project tracker lxc container to nginx.
A breakdown.

Virtualmin (SSL Lets Encrypt local certificate proxy directive .well-known) >
Proxy to Project Manager running on Nginx >
Project Manager Nginx needs a local certificate backend as it requires SSL for the backend.

Doing this as you can see a user goes to the virtualmin side with the lets encrypt certificate.

I run Proxmox so my Vrtualmin is on a lcx container on 192.168.1.3 and project manager Taiga using Nginx on lxc 192.168.1.5.

[JackJ]

So the other server also need to activate SSL, just that it cert is self-signed? Meaning that the connection between virtualmin and that server is also secure even in local LAN.

I will try later, Thank you