Otdfbt

How does the reduce() method work in Java 8?

What do I do if my advisor made a mistake?

Install LibreOffice-Writer Only not LibreOffice whole package

Should homeowners insurance cover the cost of the home?

Mug and wireframe entirely disappeared

Dangerous workplace travelling

How can internet speed be 10 times slower without a router than when using a router?

Are there terms in German for different skull shapes?

How long would it take for people to notice a mass disappearance?

How to deal with employer who keeps me at work after working hours

What was the first story to feature the plot "the monsters were human all along"?

Why did the Apollo 13 crew extend the LM landing gear?

What is this weird transparent border appearing inside my Smart Object in Photoshop?

How should I tell my manager I'm not paying for an optional after work event I'm not going to?

Is the book wrong about the Nyquist Sampling Criterion?

Adding command shortcuts to /bin

Importing a Part of the JSON

Can there be a single technologically advanced nation, in a continent full of non-technologically advanced nations?

How does summation index shifting work?

Feasibility of lava beings?

History of the kernel of a homomorphism?

How do I, as a DM, handle a party that decides to set up an ambush in a dungeon?

How to view size of map in lightning component controller?

Gerrymandering Puzzle - Rig the Election

How to reverse proxy https over ip with nginx?

Nginx proxy pass works for https but not httpnginx proxy redirecting request to different proxyNginx/Apache: set HSTS only if X-Forwarded-Proto is httpsnginx rewrite throw 404 with last and breaknginx reverse proxy hide login query also on 301 redirect or full qualified urlHow to serve Autodiscover.xml using NginxConfigure NGINX : How to handle 500 Error on upstream itself, While Nginx handle other 5xx errorsNginx Reverse Proxy + Let's Encryptnginx-1.15.9 Variable support in “ssl_certificate” and “ssl_certificate_key” directivesNginx reverse proxy to many local servers + webserver duty

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I have a server that connects to another through a VPN, this server will be used as a reverse proxy in our private network, what I want is to only allow https calls to the server in our private network.

How could I restrict secure calls only for our private netowork? (e.g. 10.0.0.1/9)

Currently, I have assigned an external IP address to the server, this external IP has a dns name associated (e.g. myserver.domain.tld) and I'm consuming the web service from the server on the other side of the VPN by using that domain. I have added a let's encrypt cert to enable ssl in the domain name.

server 
 server_name myserver.domain.tld;
 set $upstream https://1.2.3.4;
 access_log /var/log/nginx/reserve-access.log;
 error_log /var/log/nginx/reverse-error.log;

 location / 
 proxy_pass $upstream;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 

 listen 443 ssl; # managed by Certbot
 ssl_certificate /etc/letsencrypt/live/myserver.domain.tld/fullchain.pem; # managed by Certbot
 ssl_certificate_key /etc/letsencrypt/live/myserver.domain.tld/privkey.pem; # managed by Certbot
 include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

server 
 if ($host = myserver.domain.tld) 
 return 301 https://$host$request_uri;
 # managed by Certbot
 server_name myserver.domain.tld;
 listen 80;
 return 404; # managed by Certbot

nginx vpn reverse-proxy

share|improve this question

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

add a comment | 

0

I have a server that connects to another through a VPN, this server will be used as a reverse proxy in our private network, what I want is to only allow https calls to the server in our private network.

How could I restrict secure calls only for our private netowork? (e.g. 10.0.0.1/9)

Currently, I have assigned an external IP address to the server, this external IP has a dns name associated (e.g. myserver.domain.tld) and I'm consuming the web service from the server on the other side of the VPN by using that domain. I have added a let's encrypt cert to enable ssl in the domain name.

server 
 server_name myserver.domain.tld;
 set $upstream https://1.2.3.4;
 access_log /var/log/nginx/reserve-access.log;
 error_log /var/log/nginx/reverse-error.log;

 location / 
 proxy_pass $upstream;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 

 listen 443 ssl; # managed by Certbot
 ssl_certificate /etc/letsencrypt/live/myserver.domain.tld/fullchain.pem; # managed by Certbot
 ssl_certificate_key /etc/letsencrypt/live/myserver.domain.tld/privkey.pem; # managed by Certbot
 include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

server 
 if ($host = myserver.domain.tld) 
 return 301 https://$host$request_uri;
 # managed by Certbot
 server_name myserver.domain.tld;
 listen 80;
 return 404; # managed by Certbot

nginx vpn reverse-proxy

share|improve this question

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

add a comment | 

I have a server that connects to another through a VPN, this server will be used as a reverse proxy in our private network, what I want is to only allow https calls to the server in our private network.

How could I restrict secure calls only for our private netowork? (e.g. 10.0.0.1/9)

Currently, I have assigned an external IP address to the server, this external IP has a dns name associated (e.g. myserver.domain.tld) and I'm consuming the web service from the server on the other side of the VPN by using that domain. I have added a let's encrypt cert to enable ssl in the domain name.

server 
 server_name myserver.domain.tld;
 set $upstream https://1.2.3.4;
 access_log /var/log/nginx/reserve-access.log;
 error_log /var/log/nginx/reverse-error.log;

 location / 
 proxy_pass $upstream;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 

 listen 443 ssl; # managed by Certbot
 ssl_certificate /etc/letsencrypt/live/myserver.domain.tld/fullchain.pem; # managed by Certbot
 ssl_certificate_key /etc/letsencrypt/live/myserver.domain.tld/privkey.pem; # managed by Certbot
 include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

server 
 if ($host = myserver.domain.tld) 
 return 301 https://$host$request_uri;
 # managed by Certbot
 server_name myserver.domain.tld;
 listen 80;
 return 404; # managed by Certbot

nginx vpn reverse-proxy

share|improve this question

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

server 
 server_name myserver.domain.tld;
 set $upstream https://1.2.3.4;
 access_log /var/log/nginx/reserve-access.log;
 error_log /var/log/nginx/reverse-error.log;

 location / 
 proxy_pass $upstream;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 

 listen 443 ssl; # managed by Certbot
 ssl_certificate /etc/letsencrypt/live/myserver.domain.tld/fullchain.pem; # managed by Certbot
 ssl_certificate_key /etc/letsencrypt/live/myserver.domain.tld/privkey.pem; # managed by Certbot
 include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

server 
 if ($host = myserver.domain.tld) 
 return 301 https://$host$request_uri;
 # managed by Certbot
 server_name myserver.domain.tld;
 listen 80;
 return 404; # managed by Certbot

share|improve this question

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

share|improve this question

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211

asked Apr 25 at 20:15

Jonathan SolorzanoJonathan Solorzano

1311211