Redirect to Synology NAS, traefik outside NAS

Traefik Traefik v2
,
1

Hello,

I've had problems trying to setup redirection and certificate generation for a Synology NAS.

Traefik's docker container is hosted on another machine. It communicates well with the NAS.

I'm using traefikv2.9.6.
I have a subdomain wildcard certificate managed by traefik like so : *.srv.xxx-xxx.xx
I created the following file for the NAS :

[http.routers]
  [http.routers.nas-rtr]
    entryPoints = ["web-secure"]
    rule = "Host(`nas.srv.xxxxxx`)"
    service = "nas"
    [http.routers.nas-rtr.tls]
    certResolver = "certificato"
[http.services]
  [http.services.nas.loadBalancer]
    passHostHeader = true
    [[http.services.nas.loadBalancer.servers]]
        url = "https://192.168.1.9:1234"

The rule is received, the configuration applied by traefik. It creates the certificate.
Loadbalancing is where the problem occurs, I get Internal Server Error.

The loadbalancing address works if I put it simply in the browser.

In the Synology DSM, I have :

  • configured the public domain name (Control Panel > Login Portal > Domain).
  • configured the hostname (Control Panel > External Access > Advanced > Hostname or static IP)
  • put the same certificate used by traefik, defined it as default for all system applications.
  • added a firewall rule on the NAS that allows all traffic between traefik host and NAS.

I wonder if some features are messing up everything. Please enlighten me, should I disable something like HTTP CSP Header ? HTTP /2 ?

Sorry if I'm asking this in the wrong place. I'd be super grateful for any help. Thank you.

2

Enable Traefik debug log and access log to see what's happening.

Be aware that copying the loadbalancer URL to your browser is not the same as the Traefik request, as that includes the hostname, which your NAS might work with.

Try those commands, adapt them to your environment (source):

curl -H "Host: example.com" http://localhost/
curl --resolve example.com:80:1.2.3.4 http://example.com/
3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.