Proxy configuration to KVM

KVM
1

I have gl. rm1

I Wana use my own url and access from internet via apache virtualhost, I am able to logon successfully but it does display the screen

what am I doing wrong ?

Proxy configuration to KVM

ProxyPreserveHost on
ProxyRequests Off
SSLProxyEngine On
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off

# Proxy all requests to the KVM
ProxyPass / https://192.168.168.156/
ProxyPassReverse / https://192.168.168.156/
2

for security reasons why not use a vpn server with local network translation to reach these devices?

is there a special situation you want Apache and a reverse proxy and not do it over a vpn tunnel?

imho, Apache often is targeted into compromises, and besides I also make a comparison with just routers in general, I don't think it is secure to open ports to the kvm even when behind a reverse proxy... the stream could still leak the origin maybe, but you can easily reach the same goal over a vpn server which for adversaries is alot harder than firing some exploits which are in the wild, wireguard will not even show open ports on port scans because it just doesn't respond :wink:

my 2 cents, is that it is alot easier by setting up a wireguard server, forward ports from wireguard server to lan (instead of from wan), or by traffic rules allowing forwarding between zones.

I also run my own cloud on proxmox like this, and have access to jenkins-ci, and portainer, and a bunch of arr's which work with jellyfin and jellyseerr, I can use a MT3000 and wherever I go I'm always conntected to this vpn at home.

3

thanks for your feedback, the reason I need this cuz I dont have access admin access on my controller machine to install wireguard or any app for that matter.

4

Have you try with our new accessing method in 1.5 version?
Please update and visit the website glkvm.com , which is a cloud platform for remote access.
A WG tunnel will not be built in this method.

5

yes, and that what i wanto to proxy , the domain name glkvm is obvious, it will get blocked, I want to use my own url something invoices.example.com

6

You can check this thread where a similar setup is discussed: KVM behind a reverse proxy

We also provide an open-source project you can refer to: glkvm-cloud on GitHub

Both may help you.