explorer-monorepo/EXTERNAL_ACCESS_WORKING.md

External Access Working - SSL Certificate Issue

Date: 2026-01-21
Status: ✅ EXTERNAL ACCESS WORKING (SSL certificate issue only)

---

Great News! 🎉

External access is working! The connection to https://explorer.d-bis.org is successful.

The error you're seeing is not a connection problem - it's just an SSL certificate validation issue.

---

Current Status

✅ What's Working

• External access: ✅ Connection successful
• Port forwarding: ✅ Working (UDM Pro → NPMplus)
• NPMplus proxy: ✅ Working
• Network path: ✅ Complete (External → UDM Pro → NPMplus → VMID 5000)

⚠️ SSL Certificate Issue

• Error: SSL certificate problem: self-signed certificate
• Impact: Browsers/curl will show security warnings
• Fix: Need to configure proper SSL certificate in NPMplus

---

Testing Results

Test 1: HTTPS with SSL Verification Disabled

curl -I -k https://explorer.d-bis.org

Expected: HTTP 200, 301, or 302 (connection working)

Test 2: HTTP (should redirect to HTTPS)

curl -I http://explorer.d-bis.org

Expected: HTTP 301 or 302 redirect to HTTPS

Test 3: Content Access

curl -k https://explorer.d-bis.org

Expected: HTML content (explorer frontend)

---

SSL Certificate Fix

Option 1: Request Let's Encrypt Certificate (Recommended)

1. Access NPMplus Dashboard:

   # From internal network
   https://192.168.11.167:81
   

2. Navigate to SSL Certificates:

   • Click on "SSL Certificates" in left menu
   • Click "Add SSL Certificate"
   • Select "Let's Encrypt"

3. Configure Certificate:

   • Domain Names: explorer.d-bis.org
   • Email: Your email address
   • Agree to Terms: Yes
   • Click "Save"

4. Assign to Proxy Host:

   • Go to "Proxy Hosts"
   • Edit explorer.d-bis.org
   • Under "SSL Certificate", select the Let's Encrypt certificate
   • Enable "Force SSL"
   • Enable "HTTP/2 Support"
   • Click "Save"

5. Wait for Certificate:

   • Let's Encrypt certificate will be issued (usually 1-2 minutes)
   • Check certificate status in NPMplus dashboard

Option 2: Use Existing Certificate

If you already have a certificate:

1. Upload it to NPMplus
2. Assign it to the explorer.d-bis.org proxy host
3. Enable "Force SSL"

Option 3: Temporary - Accept Self-Signed (Not Recommended)

For testing only:

# Use -k flag to bypass SSL verification
curl -k https://explorer.d-bis.org

# Or in browser, click "Advanced" → "Proceed anyway"

---

Verification Commands

Test External Access (Bypass SSL)

curl -I -k https://explorer.d-bis.org

Test External Access (HTTP)

curl -I http://explorer.d-bis.org

Test Content

curl -k https://explorer.d-bis.org | head -30

Check Certificate Status

# From NPMplus container
ssh root@r630-01
pct exec 10233 -- docker exec npmplus ls -la /etc/letsencrypt/live/

---

Summary

Status: ✅ EXTERNAL ACCESS WORKING

Achievement:

• ✅ Full network path working
• ✅ Port forwarding configured correctly
• ✅ NPMplus proxy functional
• ✅ Explorer accessible externally

Remaining Issue:

• ⚠️ SSL certificate needs to be configured (Let's Encrypt recommended)

Next Step: Configure Let's Encrypt certificate in NPMplus dashboard

---

Congratulations! 🎉

The explorer is now accessible from the internet! The only remaining task is to configure a proper SSL certificate to eliminate the security warning.

---

Next Step: Access NPMplus dashboard and request Let's Encrypt certificate for explorer.d-bis.org