Self signed certificate for AIO Dashboard unnacceptable in firefox

[navyjosh]

Is your feature request related to a problem? Yes.

I cannot access aio dashboard using my default browser (Firefox v117.0.1) on Ubuntu 22.04.

When I click the Open Nextcloud AIO Interface button firefox tells me self signed certificate is not acceptable and there is no proceed button. I tried adding the nextcloud.local cert to my browser's CA but that still didn't work.

I am using Traefik v2 as a reverse proxy in front Nextcloud AIO.

Describe the solution you'd like

More documentation in the reverse proxy config setup on how to configure Traefik v2 to serve valid certificates for my domain and proxy properly to AIO dashboard. I would like to use a subdomain like aio.mydomain.com to proxy to the AIO dashboard.

Alternatively, will this solve the issue? https://stackoverflow.com/a/77009337

[szaimen]

Hi, can you post a screemshot of the error in firefox?

[navyjosh]

In order to run it behind my reverse proxy I would need the AIO dashboard to run on http instead of https. I could not find documentation that covers this

[Zoey2936]

Does Traefik not support proxying to https?

[navyjosh]

I imagine it does, wouldn't that be additional, unnecessary overhead though? I guess on the admin dashboard we won't be need to access it very frequently and won't have a huge amount of requests so the additional overhead might not matter too much.

[Zoey2936]

if traefik does support it, just use it

[mrjovanovic]

For anyone Googling this and looking for an answer, while using nginx-proxy: you want to set up proxy forwarding from HTTPS to an HTTPS upstream. Something like this works for me.

 server {
                listen 443 ssl;
                server_name aio.yourdomain.org;
                http2 on;

                location / {
                        proxy_pass https://UPSTREAM_IP:8080$request_uri;
                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                        proxy_set_header X-Forwarded-Port $server_port;
                        proxy_set_header X-Forwarded-Scheme $scheme;
                        proxy_set_header X-Forwarded-Proto $scheme;
                        proxy_set_header X-Real-IP $remote_addr;
                        proxy_set_header Accept-Encoding "";
                        proxy_set_header Host $host;
                        proxy_ssl_server_name on;

                        proxy_http_version 1.1;
                        proxy_set_header Upgrade $http_upgrade;
                        proxy_set_header Connection "upgrade";
                }
        }

Obviously add your SSL parameters there, as well as your own information. Note the https in the proxy_pass directive, as well remember to set proxy_ssl_server_name on.

You will have to stop aio-apache first with docker stop nextcloud-aio-apache, log in with the password for AIO you first set up, and then restart your containers. Make a backup first. You will be able to access it from the administration settings easily after that.