we want to use nginx to communicate to lxdhost. I need your help to solve my issue which I am facing.
I read this somewhere on internet that http reverse proxies will not allow us to pass client certs
I know lxd uses tls based certs for authentication then how can we pass the cert in our reverse proxy so that we can authentic with the host.
ref communication: https://github.com/canonical/lxd-ui/issues/1190
edlerd
April 22, 2025, 10:32am
2
Hello,
you can use a proxy in tcp mode, so ssl is passed through from your client to lxd directly. I am not sure if nginx allows for that, but HaProxy for sure can be configured in mode tcp .
Kind regards,
David
2 Likes
Can you please help me in this issue?
I want to put my lxd-host behind HAProxy and want to configure ACME for my lxd-host. I did these configs which are shared below. And Here is the config for my HAProxy. Both HAProxy and lxd-host is running on the same VM. My sub-domain is pointing to my server. I want to use Letsencrypt for certs.
ACME Config:
config:
acme.agree_tos: "true"
acme.ca_url: https://acme-v02.api.letsencrypt.org/directory
acme.domain: lxd.testdotpkdomasdfasdfasfain.com
acme.email: irtazawani100@gmail.com
co…
edlerd
April 25, 2025, 11:46am
4
Sure, I gave an answer over there.