Hello r/unRAID,

I could really use help here!

I am running the latest Unraid 7.3.1. For the past few weeks Unraid will run just fine for a little while, and then the webUI will totally lock up. I can access the MAIN tab (for example, to reboot or spin down disks) but the buttons to execute these commands are non-functional. If I then visit the DOCKER tab I get the orange loading bars for eternity.

Hardware

• USB: Microcenter-branded USB 3.0 32gb stick (Kingston Technology manufactured)
• Motherboard: ASRock Z690 Steel Legend/D5
• UPS: APC Back-UPS NS 1500M2
• CPU: i9-14900K
• GPU: Intel UHD770
• RAM: 64gb DDR5
• Networking: 2.5gbs NIC (Intel LAN controller)
• Data: 4x 12tb HDD in raid 1 (2x parity + 2x data)
• Cache: 2x 512gb Inland NVME SSD + 1x 2tb Samsung 990 Evo NVME SSD

Here are some of the details

• Unraid 7.3.1 (but I believe this started for me with 7.3.0
• Docker image disk set to 100gb for space
• Plugged in monitor and keyboard will glitch out and display this garble where there should be a login screen
• Terminal w/monitor reports unable to access opcodebytes at with </task> (see attached picture for how garbled the monitor is -- some text is clearly clipping over other text)
• Completely unable to grab logs because the system appears totally locked up
• I had on old USB die on me without flashbackup correctly configured so I'm on a 32gb Microcenter flash
• SSH into the Unraid device hangs and times out
• SOME docker containers are semi-functional when Unraid freezes up, but will eventually crash, which i can verify with my Pangolin Reverse Proxy dashboard

A few container/networking/troubleshooting things I have set up that COULD be the culprit:

• Latest version Gluetun to route various downloaders through Mullvad (Deemix, NZBget, Nicotine+)
• Ethernet interfaces (0, 1, 2) set to bond 0, with interface 1 feeding my connection
• I have a 2.5gbs NIC feeding to a 2.5gbps switch which feeds to a 4gbs Unifi Fiber Gateway Router
  • The router still shows my server on the network
  • I can still ping my server via my desktop or the router

Some plugins I have:

• Cache Mover
• Unraid Connect API (disabled)
• Local Devices Plugins
• Default Plugins

My Next Steps

I'm grabbing a dump of my flashdrive contents for backup, and then I'm rebooting into safemode to see if a plugin is doing this. I don't know what's causing the UI to lock up and eventually crash, but I really could use some guidance in fixing this.

Thank you!

A blurry picture of my debugging terminal.

Edit 2: Mission Success

After a lot of tinkering and help from u/AstralDestiny's comment below, I now have Lets Encrypt Wildcard certificates on my Pangolin domain, root, AND all hosted subdomains... COMBINED with Cloudflare Proxy!

Here's what made it work:

1. Re-rolled Cloudflare API token with correect perms, and put "" quotes around token in the docker-compose.yml
2. Made sure the tls.certResolver value in traefik_config.yml read "letsencrypt" (quotes included)
3. Set up my certificatesResolver value in traefik_config.yml to reflect what u/AstralDestiny recommended below
4. In config.yml under gerbil, added base_endpoint: with a value of "my.vps.ip" (quotes included for me)
5. In config.yml under domains domain1 is set up as such:domains: domain1: base_domain: mydomain.io prefer_wildcard_cert: true cert_resolver: letsencrypt
6. In config.yml under traefik, ensure cert_resolver: is set to letsencrypt (no quotes), and that prefer_wildcard_cert: true
7. Ensured all entryPoints in traefik_config.yml tls value was set to certResolver: "letsencrypt"
8. All router configurations in dynamic_config.yml tls.certResolver: letsencrypt (no quotes and idk why)
9. Finally, in dynamic_config.yml, under next-router, ensured I had main and sans domains, like this:

​

      tls:
        certResolver: letsencrypt
        domains:
          - main: "mydomain.io"
            sans:
              - "*.mydomain.io"

Now I have Pangolin reverse proxy as well as Cloudflare Pro's proxying. Yeehaw! Thanks again everyone. I hope this post is helpful to those who may come across it, attempting the same.

-------

Edit 1: specifying my VPS IP as the base_endpoint (with quotes around my IP) from the Cloudflare Proxy docs under gerbil in config.yml got me "message":"Starting provider *http.Provider"} in my Traefik logs. Additionally, running dig on a subdomain of my root domain reports back like it should.

I'm not sure where to go from here. I will now try to reissue the certs on my server with:

docker exec -it pangolin pangctl clear-certificates

----

Hi r/PangolinReverseProxy. I spent most of today trying to make use of the Cloudflare proxy service I already pay for, alongside my reverse proxy itself -- Pangolin. I used these docs to set up my already-running Pangolin .yml files:

• Wildcard Domains
• Cloudflare Proxy

When I reach the final step in setting up the Wildcard Domain component

sudo docker compose up -d

sudo docker compose logs -f traefik

logs show that traefik -- more specifically letsencrypt -- hangs on "Testing certificate renew..."

And that is where I am at right now.

To verify I have things set up correctly, I can confirm I have:

1. Verified everything is working in the "Verify it Works" section of Wildcard Domains.
2. A TXT record that populated in my Cloudflare DNS records pointing to _acme-challenge.mydomain.io
3. Disabled Cloudflare’s Full or Automatic SSL/TLS modes and enabled Full (Strict) mode, per Pangolin's Cloudlfare docs.

I plan to follow the rest of the Cloudflare docs, specifically on Wireguard Configuration. I actually skipped the Wireguard section of the guide as I thought Wireguard had nothing to do with Cloudflare proxies. I am inexperienced enough to know I could be wrong, however.

Has anyone succesfully set up Pangolin and Cloudflare proxies? It has been somewhat difficult to find help on this.

I am happy to provide sanitized .yml files if you want to take a look. Some things are quoted, some are are not, and I wonder if that's also my issue.

Thank you in advance!