Install on Windows Desktop Docker in a DMZ

šŸš§ Installation
1

Hello, I am absolutely noob in Linux and Docker - but I have a to do:
I have a Windows Server 2019 behind a Sophos SG in a DMZ running. I installed Desktop Docker and NextCloud AIO Container.

I set up a DNAT on Sophos of all services to route to the internal ip address of the dmz server.

From internet, I can reach cloud.mycompany.com:8080 for config (A-Host setting done).

But when in config i want to set up the domain cloud.mycompany.com then i get an error:

ā€œDomain does not point to this server or the reverse proxy is not configured correctly. See the mastercontainer logs for more details. (ā€˜sudo docker logs -f nextcloud-aio-mastercontainerā€™)ā€

So, now, i didnĀ“t want to use a reverse proxy at this time, when nextcloud is running, i can use the reverse proxy function of my sophos firewall.

Terminal log shows following:

[Thu Jan 26 12:07:28.547305 2023] [php:notice] [pid 281] [client 127.0.0.1:50622] The response of the connection attempt to ā€œttp://cloud.mycompany.com:443ā€ was: , referer: ttps://cloud.mycompany.com:8080/containers
[Thu Jan 26 12:07:28.547345 2023] [php:notice] [pid 281] [client 127.0.0.1:50622] Expected was: 51cd1424fb901a13758f701f2a218a314123456789d2, referer: ttps://cloud.mycompany.com:8080/containers
[Thu Jan 26 12:07:28.547360 2023] [php:notice] [pid 281] [client 127.0.0.1:50622] The error message was: Empty reply from server, referer: ttps://cloud.mycompany.com:8080/containers

Can someone help me? I will get crazy with thisā€¦

Thank you very much.

2

Hi, did you follow all-in-one/reverse-proxy.md at main Ā· nextcloud/all-in-one Ā· GitHub step-for-step?

3

Or is sophos not a reverse proxy?

In that case you might skip the domain validation with GitHub - nextcloud/all-in-one: Nextcloud AIO stands for Nextcloud All In One and provides easy deployment and maintenance with most features included in this one Nextcloud instance.

4

Hello, thank you for answers.

I CAN setup sophos as a reverse proxy, but didnĀ“t do that, my first target was, to bring um the nextcloud running.

I tried to set up reverse proxy, but didnĀ“t sure where i should set up comands? In Terminalsession of the docker container? Or I need to download one of the proxies in the manual (e.g. Apache, ngix and so on) and set up comands there?

Sorry for stupid questions, linux and docker are not my worldā€¦

5

If you xan leave out sophos and port-forward port 443 directly to your windows server which hosts Docker, that would be the easiest option.

6

Stupid question, where I should run the ā€œ-e SKIP_DOMAIN_VALIDATION=trueā€ comand?

I try it in the terminal console of the docker container, but then i get the message: -e: not found ā€¦

Edit: OK, i deleted the container, and put the e-Skip comand in the install line.

But for future it would be great to know, where put in this comandsā€¦

7

You need to stop and remove the mastercontainer (no data will be lost) and use the same command that you used but with the variable added to the docker run commandā€¦

1 Like