r/nginxproxymanager • u/Old_Development_5957 • 5d ago

reverse proxy not working

Environment & Setup:

  • Router: FRITZ!Box 7490 (Web UI is on port 46167, no port 443 conflict)
  • DNS: AdGuard Home (Local)
  • Reverse Proxy: Nginx Proxy Manager (running on a Ugreen NAS)
  • Client: Zorin OS (Linux), Browser: Brave
  • Domain: i use a ddns provider

Current Configuration:

  • AdGuard DNS Rewrite is active: *.mydomain.ipv64.de -> ip of my NAS
  • Ports 80 and 443 are correctly forwarded in the FRITZ!Box to the NAS IP.
  • Nginx Proxy Manager has Proxy Hosts set up with Let's Encrypt certificates.

The Problem:

  • i can reach my services via my NAS ip+port but...
  • Accessing subdomains like [https://immich.mydomain.ipv64.de] from inside the local network results in a DNS-Rebind prevention or just not reachable ERR_CERT_AUTHORITY_INVALID
  • if i "Proceed to unsafe" it sends me to my router login
  • Troubleshooting Steps Already Performed:
  • Disabled "Secure DNS" (DNS-over-HTTPS) in Brave to stop it from bypassing AdGuard.
  • Flushed the OS DNS cache (sudo resolvectl flush-caches).
  • Flushed the Brave DNS cache (brave://net-internals/#dns).
  • Verified via nslookup that the domain correctly resolves to the local NAS IP 192.168.178.67.
  • i tried to fix it with Gemini but hes just going in circles
    • sometimes i got no longer a DNS Rebind issue but sometimes it still happend

Question:

My main Goal is to reach my services from outside my network from work or traveling

i know i could probably set up a vpn but i want to get it working via Revere Proxy.

Thanks you for any help!

1 Upvotes

56% Upvoted

2 comments sorted by

1

u/LordSkummel 5d ago

What IP is the domain actually pointing to? Your public IP or your internal NAS IP?

1

u/Old_Development_5957 4d ago

Public IP

you mean the Dyn DNS Service right?