09-05-2018 11:55 AM
well, it having to be on a nginx needing to be on a different server is but of a bummer but I guess that is the only option.
you have any good links for me making the UCRM, UNMS Ubuntu servers secure before making them public facing?
09-05-2018 12:43 PM
If they are behind the proxy, nothing. the only thing that touches them is the nginx service. If you are hosting the proxy on the same box, then it's just securing an ubuntu linux box, you only need to keep the listed ports for UNMS and UCRM open in the firewall.
09-06-2018 06:37 AM - edited 09-06-2018 06:38 AM
So, if I make a Nginx server on a different machine I point the DNS A Record to the public IP of the Nginx server then that server will forward traffic to UNMS or UCRM am I understanding that part correctly?
09-06-2018 07:03 AM
yes. But if you NAT clients out the same router make sure you can hairpin NAT.
essentially, everyone hits the public address of UCRM and UNMS. This simplifies things, I rarely with 'dual home' a service with a public and a private IP if I can avoid it. The only downside is that your router has to handle more load than if clients were hitting those services directly, but it's probably pretty minimal.
09-06-2018 08:38 AM
if I give UNMS and UCRM public IP's won't I still have a port 443 conflict?
that's where I'm getting confused right now
still googling and searching youtube like crazy trying to learn more about Nginx
really wish there was a step by step guide for using DNS A records with Nginx with let's encrypt for UNMS and UCRM on the same server
as this is an issue everyone is having until the merging is done
would like to send ucrm.domain.com and unms.domain.com to 1 public on the Nginx server then that translate it to the correct server
but not fully understanding everything yet...
we do 1:1 NAT to hand out our public IP's the little extra cost should be fine as its a small network
a week ago
Hi, Im having the same problem, need to install ucrm and unms on same host server to use letsencrypt to process payments, can somebody make a step by step tutorial it would be really helpful. I can donate for the help