Security concern with web server settings - duckdns and nginx

P

Pentagano

Getting comfortable
Dec 11, 2020
664
300
Uruguay
I have duckdns set up and it is ssl encrypted through my nginx proxy manager .

Set up the duckdns https url under web server for remote access.

Chose authentication from non-LAN only but to my horror I could access my dns url from a non-lan remote site without authentication.
When configured with 'All Connections' all is fine and prompts me for authentication.

So why here is the non-lan option not working? Am I missing something?


1610547081009.png

1610547010360.png
 
Anyone?
Has anyone used this setup with their own dns, nginx and set non-lan only to find out that it still does not require any authentication from the internet?
Do I need to use 'secure session keys'?
 
Non-Lan only and secure sessions ticked - restarted
Still can access it publicly!!

Reverted quickly back to All connections for the login security.

So how do I set up the non-lan log in page only?
Something is amiss with the settings here.
 
I assume you run Nginx inside Docker.

Go to Status > Connections and you will see that all connections are made from the IP address where Docker is running. Since Docker is inside your network, all the requests from the webserver will look like from inside the LAN.

I figured this out just 5 minutes ago.
 
Lennyz1988 said:
I assume you run Nginx inside Docker.

Go to Status > Connections and you will see that all connections are made from the IP address where Docker is running. Since Docker is inside your network, all the requests from the webserver will look like from inside the LAN.

I figured this out just 5 minutes ago.
Click to expand...
Running the home assistant nginx proxy Manger so it runs as a container. All 443 ports on the gateway go through the proxy on port 81. I set up the ssl and dns connection hosts in the proxy manager. I'll try to check on Monday
 
You must log in or register to reply here.
Top Bottom