Imaginary_Stand4909

Side note: I just tried switching to KeePassXC and it seems pretty fine, except for one caveat. If you installed your browser (probs FF or Librewolf) through flatpak or snap on Linux, the browser extension will not work.

I had to change to the non-Flatpak ver of Librewolf on my Fedora PC, which sucked a little lol 😅

I’m not too worried about lack of tls/https for my websites rn, I just want to get working concept lol.

But thanks for the caddyfile, although I’m not sure I can use it since OPNsense seems to like to auto generate the config based on the settings in the UI.

I’ve narrowed down my issue a little more with the help of frongt@lemmy.zip, and I’ve established that:

Pinging immich.homelab.internal gets a response from the correct IP. When typing immich.homelab.internal or immich.homelab.internal:2283 in browser I get an ERR_NAME_NOT_RESOLVED page.

If I curl immich.homelab.internal, I get: curl: (7) Failed to connect to immich.homelab.internal port 80 after 6 ms: Could not connect to server

If I curl immich.homelab.internal:2283, I do get the html of the site at least.

Through some digging through other people’s forum posts, I made sure to turn off https redirects (auto_https disable_redirects).

I definitely know that it’s failing because Caddy isn’t redirecting my services from port 80 to their upstream port (2283, 8006, etc.), but I don’t know why it won’t redirect, even when looking at logs…

Sorry, I didn’t specify in my original post but I did plan to use .internal for my domains. And I never planned to open my ports on my firewall either so that’s good to know. But I’m still having issues despite this…

Here’s my Caddyfile:

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
	log {
		output net unixgram//var/run/caddy/log.sock {
		}
		format json {
			time_format rfc3339
		}
	}

	servers {
		protocols h1 h2
	}

	email [redacted]
	grace_period 10s
	skip_install_trust
	import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


immich.homelab.internal {
	handle {
		reverse_proxy 192.168.10.247:2283 {
		}
	}
}

import /usr/local/etc/caddy/caddy.d/*.conf

Here’s my firewall config (I allowed any source IP to Destination “This Firewall” & port 443/80 on my LAN/VLANs): Image

Here’s my Caddy configs:

Image

Image

And I did make a wildcard domain override (*.homelab.internal) in Unbound with this config:

Host = *
Domain = homelab.internal
Type = IPv4
IP = 192.168.10.247

I can ping my server’s IP, nslookup the homelab.internal domain, and ping homelab.internal. So the regular DNS entry is working, I just can’t get my reverse proxy to work…

Huh, just checked settings and I see that you can add SSIDs to a radio. Awesome, thanks!

But I think I have to add, that I use the openwrt machine just as dumb access point behind a opnsense box.

Ooh, can you go more into that? i have Opnsense as my router and this AP is just supposed to act as a WAP. I was struggling to figure out how to have it pull dhcp from the router and not to configure it on the WAP itself. That and DNS too, if the DNS isn’t configured on the interface then I get no inetnet access.

What hardware do you recommend?

Tbh I just picked something that was in their list of supported hardware that also operated with the Wifi bands I needed and had a good amount of Flash and RAM. Try to take the time to research what wifi drivers suck, such as Broadcomm. Mine is a Qualcomm, I got the Linksys MX5300 Velop Mesh, and now that I got my 3 wifi VLANs set it seems pretty nice. Haven’t gotten to use it much though so we’ll see, but I’m excited.

I do recommend checking how many radios it has because I was maybe considering having my Smart TV on it’s own VLAN but I don’t have enough radios for that. Maybe I’ll put it on the IoT VLAN.

Are there any that are smart enough for a SMB setting where the APs all scan other networks and then talk to each other and set their own channels and power levels to optimize WiFi traffic with minimal channel or power overlap?

Sorry, I don’t know anything about this 😅 You’d have to research this.