0

I have some problems with my PfSense and HAProxy :

I have generated a certificate with ACME on PfSense for my subdomain, but i can only access from internet to it from the WAN ip and not the subdomain :(

my web server is 192.168.2.2 on my LAN.

There is my HAProxy front end configuration : enter image description here

backend : enter image description here in my backend : enter image description here

and i have a rule in my WAN : enter image description here

I have manually activated a2ensite and imported the cert and the key generate by ACME on my apache web server, and edited default-ssl.conf with :

<IfModule mod_ssl.c>
    <VirtualHost _default_:443>
        ServerAdmin webmaster@localhost
        ServerName example.com
        DocumentRoot /var/www/html

        # Specify the SSL certificate and key
        SSLEngine on
        SSLCertificateFile /etc/apache2/ssl/example.com.crt
        SSLCertificateKeyFile /etc/apache2/ssl/example.com.key

        # Enable SSL/TLS protocols
        SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
        SSLCipherSuite HIGH:!aNULL:!MD5:!3DES:!CAMELLIA:!AES128

        # Enable HSTS header
        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"

        # Other configuration directives...
    </VirtualHost>
</IfModule>

No problem with reloading the apache process, i think i have missunderstand the way HAProxy works ? I shouldn't add manualy the cert and key to the web server and dont edit the default-ssl.conf ? It supposed to be the work of HAProxy ?

Like i say, owncloud.mydomain.fr:4443 doesnt work but @WanIP:4443 work (with a warning on the cert so this is why i suppose i dont use haproxy in the good way).

Thanks in advance and already sorry for my difficult english :$

0 Answers0