Hello, I've been attempting to get LabCA working in a Docker environment. I use Pangolin/Traefik to reverse proxy all of my containers so I do not have to expose ports unnecessarily. My current issue is getting LabCA to successfully reverse proxy. Has anyone been able to get LabCA to reverse proxy? I cannot get further than the setup with my current setup. I have added my custom network to the docker-compose.yml file so that the reverse proxy can talk to all the containers in the stack. The only thing that is currently proxied is the nginx container, proxying https://labca-nginx-1:443 to my selected URL, otherwise if I attempted to proxy http://labca-nginx-1:80 the only thing that works is the frontpage, navigating to other pages will result in a 'Too Many Redirects' error. Proxying the HTTPS version allows me to access the admin pages, however, I am unable to complete the setup. Something will eventually error. I believe Boulder or pkimetal is the problem, as looking at the logs using docker compose logs -f and tracing errors has yielded some interesting errors. I've attached the docker compose log in case anyone's curious.
logs_redacted.txt
Looking at the latest part of the logs, it looks like Boulder cannot get to OCSP, but that should not be the case?
Has anyone successfully reverse proxied LabCA?
Hello, I've been attempting to get LabCA working in a Docker environment. I use Pangolin/Traefik to reverse proxy all of my containers so I do not have to expose ports unnecessarily. My current issue is getting LabCA to successfully reverse proxy. Has anyone been able to get LabCA to reverse proxy? I cannot get further than the setup with my current setup. I have added my custom network to the docker-compose.yml file so that the reverse proxy can talk to all the containers in the stack. The only thing that is currently proxied is the nginx container, proxying
https://labca-nginx-1:443to my selected URL, otherwise if I attempted to proxyhttp://labca-nginx-1:80the only thing that works is the frontpage, navigating to other pages will result in a 'Too Many Redirects' error. Proxying the HTTPS version allows me to access the admin pages, however, I am unable to complete the setup. Something will eventually error. I believe Boulder or pkimetal is the problem, as looking at the logs usingdocker compose logs -fand tracing errors has yielded some interesting errors. I've attached the docker compose log in case anyone's curious.logs_redacted.txt
Looking at the latest part of the logs, it looks like Boulder cannot get to OCSP, but that should not be the case?
Has anyone successfully reverse proxied LabCA?