Menu

Webmin proxied via apache + cloudflare over ssl

Webmin
2016-06-06
2019-04-29
  • Benjamin Martens

    I've set the webmin service to listen on localhost on port 10000. Apache is proxying the webmin connection to a domain like https://admin.domain.com. I'm using this configuration to achieve this:

    I'm using these apache modules: proxy_http proxy ssl rewrite

    This in in my apach2.conf file

    <VirtualHost *:443>
    SSLProxyEngine On
    RemoteIPHeader X-Forwarded-For
    ProxyPreserveHost On
    ProxyPass        "/" "https://localhost:10000/"
    ProxyPassReverse "/" "https://localhost:10000/"
    ServerName admin.domain.com
    ServerAlias admin.domain.com
    SSLEngine on
    SSLCertificateFile /usr/local/certificates/certificate.pem
    SSLCACertificateFile /usr/local/certificates/1_root_bundle.crt
    </VirtualHost>
    

    These are my webmin server options:

    I'm using https://www.cloudflare.com/ as CDN and firewall for my server, it basically relays all trafic from my sever and redistributes it via its worldwide network

    This all work fine, except for when a user logs in to the system. Webmin then automatically directs the user to https://admin.domain.com:10000/

    Is there any way to change this behaviour ?

     
  • Alireza Enzevaee

    I reckon it might be a little late to answer this question based on post date. but I had same issue and I found that it is because cloudflare only allow certain ports but 10000.
    https://support.cloudflare.com/hc/en-us/articles/200169156-Which-ports-will-Cloudflare-work-with-

    The HTTP ports that Cloudflare support are:
    80
    8080
    8880
    2052
    2082
    2086
    2095

    The HTTPs ports that Cloudflare support are:
    443
    2053
    2083
    2087
    2096
    8443

    Anyways, I have another issue now with cloudflare which is! I config the webmin to listen to port 2053 and it seems to work properly as it works fine on local host over this port, but from external I receive 522 error, and this is when cloudflare says that it passes the request to the right port.

    Any idea about any possible sulotion is welcomed.

     

Log in to post a comment.