Add instructions in Caddy on how to prevent the HTTP_REFERER error (#547)

While setting up a reverse proxy for the OPNsense web UI, I stumbled on
this error. Without this configuration change, we get the following
error after logging in to https://opn.example.com

> The HTTP_REFERER "https://opn.example.com/" does not match the predefined settings
pull/550/head
Dany Marcoux 1 month ago committed by GitHub
parent 86ad155808
commit a0f4ac7ca4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -362,6 +362,11 @@ Options Values
* Press **Save** and **Apply**
Go to `System - Settings - Administration`
* Input ``opn.example.com`` in `Alternate Hostnames` to prevent the error `The HTTP_REFERER "https://opn.example.com/" does not match the predefined settings` after logging in
* Press **Save**
.. Note:: Open ``https://opn.example.com`` and it should serve the reverse proxied OPNsense WebUI. Check the log file for errors if it doesn't work, most of the time the TLS Server Name doesn't match the SAN of the `TLS Trusted CA Certificate`. Caddy doesn't support CN (Common Name) in certificate since it's been deprecated since many years. Only SAN certificates work.
.. Attention:: Create an access list to restrict access to the WebUI. Add that access list to the domain in advanced mode.

Loading…
Cancel
Save