Newbie here. Got NextcloudPi running successfully over WiFi. Gave it a static IP address. Opened Ports 80 and 443 on my Google Mesh Router (at least I think I did). Set up a redirect via FREEDNS, which again works great from inside my home.
Outside the home my Nextcloud server is unreachable. Even pinging the IP address from outside my LAN fails.
I’m guess this explains why the LetsEncrypt certificate fails and half the music streaming apps on my phone fail too. They can’t see the server either.
Is there anything obvious I’m not doing?
Thanks and apologies if this is a common question!
Gary
not sure it helps exactly but it makes me more confident that the problem is somewhere there.
I don’t know the Google Mesh Router, so I’m just looking at your screenshot and try to interpret what I’m seeing. It seems to list devices with their open (listening) ports, so we see that your nextcloudpi as well as your Google Home hub seem to have webservers running and are listening on the HTTP and HTTPS ports.
There are mutliple entries for the Google Home hub, with the first one stating “443 -> 443” which looks like what might be a port forwarding. But even if so, it ends at the wrong device…
Googling a bit for Google (ha, ha) I found this tutorial:
I must say I find this interface a bit, let’s say, peculiar…
So what you want is basically that your router forwards all external requests that reach it on port 80 and port 443 to your nextcloudpi box. Now how you can achieve that with this router settings interface is unclear to me - sorry for that!
De-milititarized zone? Not sure I know enough to answer that. I can say that when I’m in my home everything works great; but if I use my laptop and go through my phone’s wi-fi hotspot, then the NextCloudPi server cannot be reached.
A DMZ , short for demilitarized zone, is a network (physical or logical) used to connect hosts that provide an interface to an untrusted external network – usually the internet – while keeping the internal, private network – usually the corporate network – separated and isolated form the external network .
this is a good video about the DMZ
I’m not sure this is heading the right way. In principle with port forwarding there is no need for a DMZ - it might even be dangerous. A good read on the topic is e.g. here:
Well, thank you both. I’m watching the video now while I’m waiting for a google chat representative to come online. Just learned something new. Sounds like sturtz_nate was having the same problem as me and couldn’t get it resolved either.
