Skip to main content

Reverse Proxy Installation

Antoine de Barbarin

Certificate

In the pfSense web configurator, go to System > Certificates > Authorities and click on Add, then fill it with the following values and click on Save

image-20250601150743814image-20250601150743814

Then go to Certificates and click on Add/Sign then fill the form with the following values and click on Save

image-20250601151103072image-20250601151103072

HAProxy

Go to System > Package Manager > Available Packages and search for HAProxy and click on Install

image-20250601150147787image-20250601150147787

Click on Confirm to begin the installation

image-20250601150300998image-20250601150300998

When the installation is complete, you will have the following result

image-20250601150429856image-20250601150429856

Go to Services > HAProxy > Backend and click on image-20250601151302432, then fill the form with the following values and click on Save

image-20250601151849403image-20250601151849403 image-20250601151927418image-20250601151927418 image-20250601152041673image-20250601152041673

Do the same for Wiki.js with the port being 3000 instead of 3456.

image-20250601152425585image-20250601152425585

Then go to Frontend and click on Add button, then fill the form with the following values and click on Save

image-20250601153306981image-20250601153306981

Repeat the process with Vikunja checking the option Shared Frontend selecting the Wikijs-Frontend and click on Save

image-20250601153556929image-20250601153556929

Then add a third frontend to redirect requests from HTTP to HTTPS when in the infrasi.lan domain

image-20250601154215170image-20250601154215170

You should have the following frontends

image-20250601154325962image-20250601154325962

Go to Settings to enable HAProxy filling the form with the following values and click on Save

image-20250601154653757image-20250601154653757

Go to Firewall > Rules > WAN and add a rule to accept IPv4 TCP requests on HTTP and HTTPS ports

image-20250601155104637image-20250601155104637

Now the websites are available from the outside using HTTPS and the domain name infrasi.lan

ⓘ You need to have DNS entries in the WAN network that points to your WAN address for the infrasi.lan domain and the notes.infrasi.lan and wiki.infrasi.lan sub-domains.

image-20250601155938838image-20250601155938838

image-20250601160046244image-20250601160046244

Back to top