Error code 526 in my website now

[lechuga486]

Hello,

I’m not sure what I’ve touched but now I’m not getting the main website to work.

https://insurgenciservers.com/

→ Error code 526

other webs go okey
https://omv.insurgenciservers.com/

Encryption type: Full

Operating system: Debian (Pi-OS Lite)

The main system is OpenMediaVault

I am using a docker with “Nginx Proxy Manager” to manage proxies/certificates.

As I said before it was working but I don’t know what I have touched and now the main domain is not working, the subdomains are working.

[neiljay]

@lechuga486

As I said before it was working but I don’t know what I have touched and now the main domain is not working, the subdomains are working.

Both do not work. In fact, your origin server is unreachable. Make sure your DNS settings are correct and other configs. For more info, check the following Tutorial

Community Tip - Fixing Error 523: Origin is unreachable

Error Try the suggestions in this Community Tip to help you fix “Error 523: Origin is unreachable”. Background Error 523 indicates that there is an issue in the origin web server and it has become unreachable. The most common cause is that your DNS settings are incorrect. When this happens, you’ll see “Error 523: Origin is unreachable”. [Banner in tip catalog] Cloudflare Diagnostic Center Checks: nameservers, DNSSEC, DS record configuration, if connecting to ‘domain.com’ works, if connecti…

[lechuga486]

Yea i fix this

i genearet certificate witch Cloudflare API in nginx-proxy-manager (docker)

If I put it in flexible mode my website works correctly, but I would like to keep the “Full” mode

Any idea?

[lechuga486]

with flex mode

[neiljay]

@lechuga486

If I put it in flexible mode my website works correctly, but I would like to keep the “Full” mode

That’s not the best idea. Here’s why:

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

[lechuga486]

My problem is install “original certificate” in Nginx Proxy Manager docker

I do not know how to do it and when I have tried I have not succeeded.

I understand that an original certificate is not the same as an SSL certificate and is only valid for communication between the server and cloudflare.