u/drryan3

Hello. The App Central widget apparently installed a non-docker version of nginx to reverse proxy https-http for installed apps such as immich, sabnzbd, etc. This was fine when I was simply using my LAN to access things, but now I have a public IP address available and cannot figure out how to do these two things:

Generate certificates for the following: videos.mydomain.com to Jellyfin, photos.mydomain.com to Immich and files.mydomain.com to NextCloud. The Web Center ADM app says I have no implementation or web server installed. It appears the general solution for DNS-01 challenge certificate generation is certbot, but I cannot find Asustor specific installation instructions that do not involve CloudFlare. PHP3 and pip3 are installed and functioning.

Setup reverse proxy's for each of the apps listed with appropriate certificates. I don't much care if I use ADM's reverse proxy or something else, but would like some assistance getting these three services configured on https on the public address.

My router is already configured to only allow 80 and 443 to the NAS.

TIA

Hello.

I have an unusual (to me) configuration I'm trying to configure on a NetGate SG-3100 running pfSense 23.09.1 and I'm looking for advice or help with configuration. I shut down a business that was in an office having several satellites with a Cisco based VPN network and for compliance reasons must maintain something similar to that network with the old servers in my home. Now, I'm working to exit cloud services personally with self hosting (think Immich and NextCloud)

I have two connections to my ISP at my home. One is for residential use and I cannot obtain a fixed IP address on this connection. The second is a commercial account and I have three fixed public IP addresses. The residential network is configured as 172.16.1.x and is totally separate from the NetGate router. The public IP addresses on the other are 66.x.x.68/25. The Netgate router is .68, an email server is .69, and a planned NAS is .70.

For fast implementation when my office closed, the mail server at 66.x.x.69 was setup on a switch in front of the router. Dumb, but had no choice. Now, I'd like to get everything behind the NetGate. I don't need any NAT on the NetGate. The only devices will be the mail server and the NAS. No clients/workstations/PCs.

I can create a small VLAN (say 192.168.15.x) on the router and on the NAS using a second ethernet port on the NAS. I plan to use Nginix to route traffic based on subdomains I've created on the 66.x.x.70 address.

I want the email server to keep a public address (66.x.x.69) in its network configuration. I've no desire to reconfigure.

I want the NAS to be port forwarded on 80 and 443 to the internal (192.168.15.x) address so Nginix can route to the appropriate ports based on the subdomains.

Security is not part of this question. Just router configuration.

How do I do this on pfSense? I cannot get past the bridging for the mail server. I get errors like "IP Address 66.x.x.69 is being used by or overlaps with WAN (66.x.x.68/25) and "A valid IPv4 gateway must be specified" when I have entered the IP address of the ISP upstream gateway.