From 0b6a8d054f2e617b5ce03a097baa496cf228e2a7 Mon Sep 17 00:00:00 2001 From: Konstantin Date: Mon, 2 Mar 2026 17:41:14 +0100 Subject: [PATCH] fix(netbird): Change proxy domain to avoid TLS conflicts MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Per NetBird documentation, the proxy domain must NOT be a subdomain of the management domain as this causes TLS and routing conflicts. Changed from proxy.netbird.renner.uno to proxy.renner.uno. Also added NB_PROXY_DEBUG=true for troubleshooting. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- ansible/roles/netbird-server/defaults/main.yml | 4 +++- ansible/roles/netbird-server/templates/proxy.env.j2 | 1 + 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/ansible/roles/netbird-server/defaults/main.yml b/ansible/roles/netbird-server/defaults/main.yml index 88263ac2..f3d5f9ff 100644 --- a/ansible/roles/netbird-server/defaults/main.yml +++ b/ansible/roles/netbird-server/defaults/main.yml @@ -25,5 +25,7 @@ netbird_datastore_key: "{{ vault_netbird_datastore_key }}" netbird_relay_secret: "{{ vault_netbird_relay_secret }}" # Reverse proxy configuration -netbird_proxy_domain: "proxy.netbird.renner.uno" +# IMPORTANT: Proxy domain must NOT be a subdomain of the management domain +# (netbird.renner.uno) per NetBird docs - causes TLS/routing conflicts +netbird_proxy_domain: "proxy.renner.uno" netbird_proxy_token: "{{ vault_netbird_proxy_token }}" diff --git a/ansible/roles/netbird-server/templates/proxy.env.j2 b/ansible/roles/netbird-server/templates/proxy.env.j2 index 9ec6d10a..c0b1e53f 100644 --- a/ansible/roles/netbird-server/templates/proxy.env.j2 +++ b/ansible/roles/netbird-server/templates/proxy.env.j2 @@ -6,3 +6,4 @@ NB_PROXY_ADDRESS=:8443 NB_PROXY_ACME_CERTIFICATES=true NB_PROXY_ACME_CHALLENGE_TYPE=tls-alpn-01 NB_PROXY_CERTIFICATE_DIRECTORY=/certs +NB_PROXY_DEBUG=true