Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
laptopwiki:guides:docker:meshcentral [30/07/2023 00:27] dustojnikhummerlaptopwiki:guides:docker:meshcentral [12/01/2024 21:14] (current) – [If Cloudflare Proxy] dustojnikhummer
Line 73: Line 73:
       * For example, TZ=Europe/Prague, TZ=America/New_York, TZ=Australia/Sydney       * For example, TZ=Europe/Prague, TZ=America/New_York, TZ=Australia/Sydney
     * Storage mounts (I had issues with MeshCentral Volume paths, so that is why I'm using volumes)     * Storage mounts (I had issues with MeshCentral Volume paths, so that is why I'm using volumes)
-    * ALLOW_NEW_ACCOUNTS=false, setting true would allow users to register \\ With FALSE on first start you can create an account, that will be your admin, after that registrations get disabled+    * ALLOW_NEW_ACCOUNTS=false, setting true would allow users to register \\ With FALSE on first start you can create an account, that will be your admin, after that registrations get disabled \\ This can also be set in config.json
  
 ===== Config File ===== ===== Config File =====
   * You will find the config file in the container's **/opt/meshcentral/meshcentral-data** folder   * You will find the config file in the container's **/opt/meshcentral/meshcentral-data** folder
-    * Since I used a Docker Volume, I can use Portainer to see where that is mounted on my server's filesystem \\ For example: /var/lib/docker/volumes/meshcentral_data/_data \\  +    * Since I used a Docker Volume, I can use Portainer to see where that is mounted on my server's filesystem \\ For example: /var/lib/docker/volumes/meshcentral_data/_data 
-{{:laptopwiki:guides:docker:meshcentral_portainer1.jpg?800|}}+    {{:laptopwiki:guides:docker:meshcentral_portainer1.jpg?1000|}}
   * Open the config.json file with <code> sudo nano /var/lib/docker/volumes/meshcentral_data/_data/config.json </code>   * Open the config.json file with <code> sudo nano /var/lib/docker/volumes/meshcentral_data/_data/config.json </code>
   * If this is your initial installation, the config file will be pretty barebones   * If this is your initial installation, the config file will be pretty barebones
Line 123: Line 123:
 </code> </code>
  
 +  * Note: I did not touch the letsencrypt section here at all, since we are handling our SSL certificate elsewhere
 ==== So what are we changing and why? ==== ==== So what are we changing and why? ====
   * TLDR:   * TLDR:
Line 128: Line 129:
     * Since ours is behind NPM it can't communicate directly and hashes won't match.     * Since ours is behind NPM it can't communicate directly and hashes won't match.
     * We need to tell it to instead use NPM's certificate     * We need to tell it to instead use NPM's certificate
-  - "cert": "meshcentral.laptopwiki.eu" - to tell Mesh Central what certificate to use+  - "cert": "meshcentral.laptopwiki.eu" - to tell Mesh Central what certificate to use - works even if you use a wildcard certificate (*.laptopwiki.eu)
   - "_sessionKey": "generate_password_here", - please use a password manager to generate a random password here   - "_sessionKey": "generate_password_here", - please use a password manager to generate a random password here
   - "TLSOffload": "nginx-proxy-manager" - set Docker hostname or IP address of your NPM installation, don't put port here   - "TLSOffload": "nginx-proxy-manager" - set Docker hostname or IP address of your NPM installation, don't put port here
Line 148: Line 149:
 </code> </code>
 ===== If Cloudflare Proxy ===== ===== If Cloudflare Proxy =====
-  - This setup works fine through Cloudflare Proxy, assuming +  * As of August 2023, MeshCentral no longer works through Cloudflare Proxy, see [[https://github.com/Ylianst/MeshCentral/issues/5302]] 
-  - Cloudflare Dashboard -> yourdomain.tld -> SSL/TLS -> Overview -> FULL +  <del>This setup works fine through Cloudflare Proxy, assuming</del> 
-  - This is necessary so that the Cloudflare Proxy and your local certificate match and Cloudflare doesn't try to redirect+  - <del>Cloudflare Dashboard -> yourdomain.tld -> SSL/TLS -> Overview -> FULL</del> 
 +  - <del>This is necessary so that the Cloudflare Proxy and your local certificate match and Cloudflare doesn't try to redirect</del>
  
 ===== Issues ===== ===== Issues =====
  • laptopwiki/guides/docker/meshcentral.1690669620.txt.gz
  • Last modified: 30/07/2023 00:27
  • by dustojnikhummer