Local DNS Rewrite failing

[cmar7945]

was able to set *.homelab rewritten to the IP of my NPM instance via my DNS server, and i could have something like adguard.homelab proxy host set up to forward http://IP:PORT. it worked with no issue on NPM. but I cant seem to do that in NPMPlus it seems to redirect to the congratulations page. What am I doing wrong? this is for internal use only, no external access.

[Zoey2936]

Even if you do this request using curl?

[cmar7945]

With npm it just worked with no issue no need to do anything extra. Just rewrote the wildcard *.homelab with my npm instance as destination and it worked for all 23 hosts. With this one I always get the congrats page except for npm.homelab which returns correctly. You ask about doing this request with curl. Which host should I run the command on?

[Zoey2936]

One of your choice, can you show me the list of your proxy hosts?

[cmar7945]

adguard.homelab -> http://192.168.0.4:8081

See above for an example of one single host. I'm not at my pc rn to give the full list.

[Zoey2936]

Just send a Screenshot when you can

[cmar7945]

Did you want the original NPM screenshot or both NPM+ and original?

[Zoey2936]

Npmplus is enough

[cmar7945]

[Zoey2936]

Can you maybe send me theier config file from /opt/npm/nginx/proxy_hosts, please?

[cmar7945]

[Zoey2936]

what happens if you execute curl -vL http://unifi.homelab ?

[cmar7945]

Could not resolve hostname unifi.homelab

[Zoey2936]

did you configured your nameserver correctly?

[cmar7945]

All of my network is designed to look at my adguard home instance for DNS

[Zoey2936]

then it would at least be able to resolve dns, which it can not, as you can read yourself.
you can also try it on windows, you maybe need to replace curl with curl.exe

[cmar7945]

Is there a better way in npm plus to do this? Im mainly using it to make local records in a sense. Most of these services I don't want exposed to the Internet as I use unifi teleport VPN to access my site securely

[Zoey2936]

please run the curl commands otherwise I can't debug why it is not working

[cmar7945]

* Host unifi.homelab:80 was resolved.
* IPv6: (none)
* IPv4: 192.168.0.5
*   Trying 192.168.0.5:80...
* Connected to unifi.homelab (192.168.0.5) port 80
> GET / HTTP/1.1
> Host: unifi.homelab
> User-Agent: curl/8.8.0
> Accept: */*
>
* Request completely sent off
< HTTP/1.1 301 Moved Permanently
< Date: Fri, 20 Sep 2024 04:02:11 GMT
< Content-Type: text/html
< Content-Length: 162
< Connection: keep-alive
< Location: https://unifi.homelab/
<
* Ignoring the response-body
* Connection #0 to host unifi.homelab left intact
* Clear auth, redirects to port from 80 to 443
* Issue another request to this URL: 'https://unifi.homelab/'
* Host unifi.homelab:443 was resolved.
* IPv6: (none)
* IPv4: 192.168.0.5
*   Trying 192.168.0.5:443...
* Connected to unifi.homelab (192.168.0.5) port 443
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* schannel: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued by an authority that is not trusted.
* Closing connection
* schannel: shutting down SSL/TLS connection with unifi.homelab port 443
curl: (60) schannel: SEC_E_UNTRUSTED_ROOT (0x80090325) - The certificate chain was issued by an authority that is not trusted.
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[cmar7945]

I think the main issue is that all of the *.homelab stuff is being directed to NPM+ but not being routed to the true destination somehow.

[Zoey2936]

ok it seems for some reason to return a redirect to https, I will try reproduce it latert today

[cmar7945]

Thanks! keep me posted :)

[Zoey2936]

can you maybe send me your entire /opt/npm/nginx folder please? as a zip file maybe? to see which configuration could be the problem. since I can't reproduce it. And your compose file please

[cmar7945]

nginx.zip
npmplus.txt

[cmar7945]

Please see the uploaded files for the information you requested :)

[Zoey2936]

I've created a new NPMplus and pasted your configs in, created dns rewrites and it worked. No redirect to https

[cmar7945]

So what am I missing? Did I miss something in a setup somewhere?

[cmar7945]

What I did was go into adguard home which is my DNS server and do a DNS rewrite for *.homelab as a wildcard to 192.168.0.5 for NPM+

[Zoey2936]

and no host works? not even the for npmplus itself?

[cmar7945]

Npm plus itself is the only one to work the others fail

[Zoey2936]

can you maybe change your hosts to proxy to https, so for example unifi try instead of http 192.168.0.1 80 try https 192.168.0.1 443

[cmar7945]

I did that and it works, but keeps redirecting me back to unifi.homelab and won't log in

[Zoey2936]

what do you mean with won't login?

[cmar7945]

I try to log into unifi.homelab with the credentials for the unifi gateway, but it accepts them and just redirects me back to the sign in page

[Zoey2936]

screenshot? logs? something that helps me?