Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
laptopwiki:guides:docker:meshcentral [07/03/2025 15:21] dustojnikhummerlaptopwiki:guides:docker:meshcentral [08/03/2025 18:58] (current) – external edit 127.0.0.1
Line 77: Line 77:
  
   * In this, Mesh Central will use a MongoDB instance to store everything, instead of SQLite   * In this, Mesh Central will use a MongoDB instance to store everything, instead of SQLite
-  * You must change: - Network name to match what your NPM is using, in my case that name is "reverse_proxy" +  * You must change: 
-  * You can change * TZ - timezone, so your logs have proper timestamps, follows standardized naming  [[https://en.wikipedia.org/wiki/List_of_tz_database_time_zones|https://en.wikipedia.org/wiki/List_of_tz_database_time_zones]]+    - Network name to match what your NPM is using, in my case that name is "reverse_proxy" 
 +  * You can change 
 +      * TZ - timezone, so your logs have proper timestamps, follows standardized naming  [[https://en.wikipedia.org/wiki/List_of_tz_database_time_zones|https://en.wikipedia.org/wiki/List_of_tz_database_time_zones]]
       * For example, TZ=Europe/Prague, TZ=America/New_York, TZ=Australia/Sydney       * For example, TZ=Europe/Prague, TZ=America/New_York, TZ=Australia/Sydney
   * Storage mounts (I had issues with MeshCentral Volume paths, so that is why I'm using volumes)   * Storage mounts (I had issues with MeshCentral Volume paths, so that is why I'm using volumes)
Line 285: Line 287:
 ==== So what are we changing and why? ==== ==== So what are we changing and why? ====
  
-  * TLDR: * Mesh Central uses a self signed certificate to talk to clients.+  * TLDR:  
 +      * Mesh Central uses a self signed certificate to talk to clients.
       * Since ours is behind NPM it can't communicate directly and hashes won't match.       * Since ours is behind NPM it can't communicate directly and hashes won't match.
       * We need to tell it to instead use NPM's certificate       * We need to tell it to instead use NPM's certificate
Line 292: Line 295:
   - "TLSOffload": "nginx-proxy-manager" - set Docker hostname or IP address of your NPM installation, don't put port here   - "TLSOffload": "nginx-proxy-manager" - set Docker hostname or IP address of your NPM installation, don't put port here
   - "port": 443, - change if you don't use 443. If your NPM isn't on the same docker host this should be the exposed port (for example 8786) but I haven't tested it so I don't really know.   - "port": 443, - change if you don't use 443. If your NPM isn't on the same docker host this should be the exposed port (for example 8786) but I haven't tested it so I don't really know.
-  - "certUrl": "https://meshcentral.laptopwiki.eu:443" - Public FQDN of your Mesh Central server, including the port +  - "certUrl": "https://meshcentral.laptopwiki.eu:443" - Public FQDN of your Mesh Central server, including the port * Save the file (Press Ctrl+O and Enter to save changes and Ctrl+X to exit Nano) \ * Start the Docker Compose project ''sudo docker compose up -d '' // 
-  * Save the file (Press Ctrl+O and Enter to save changes and Ctrl+X to exit Nano) \  + 
-  * Start the Docker Compose project ''sudo docker compose up -d '' +
 =====  NGINX Proxy Manager ===== =====  NGINX Proxy Manager =====
   - Add a new Proxy host as you would with any other Docker container \\  {{:laptopwiki:guides:docker:meshcentral_npm1.png?400}}   - Add a new Proxy host as you would with any other Docker container \\  {{:laptopwiki:guides:docker:meshcentral_npm1.png?400}}
Line 301: Line 304:
 proxy_set_header X-Forwarded-Host $host:$server_port; proxy_set_header X-Forwarded-Host $host:$server_port;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 200s; +proxy_set_header X-Forwarded-Proto $scheme; 
-proxy_connect_timeout 200s; proxy_send_timeout 200s; </code> \\ {{:laptopwiki:guides:docker:meshcentral_npm2.png?400}} +proxy_read_timeout 200s; 
 +proxy_connect_timeout 200s; 
 +proxy_send_timeout 200s; </code> \\ {{:laptopwiki:guides:docker:meshcentral_npm2.png?400}} 
 ==== If Cloudflare Proxy  ===== ==== If Cloudflare Proxy  =====
   - As of August 2023, MeshCentral no longer works through Cloudflare Proxy, see [[https://github.com/Ylianst/MeshCentral/issues/5302|https://github.com/Ylianst/MeshCentral/issues/5302]]   - As of August 2023, MeshCentral no longer works through Cloudflare Proxy, see [[https://github.com/Ylianst/MeshCentral/issues/5302|https://github.com/Ylianst/MeshCentral/issues/5302]]
  • laptopwiki/guides/docker/meshcentral.1741357278.txt.gz
  • Last modified: 08/03/2025 18:58
  • (external edit)