# HAproxy, pfsense, ACME unraid server, cloudflare

**URL:** <https://discourse.haproxy.org/t/haproxy-pfsense-acme-unraid-server-cloudflare/7432>\
**Category:** Help!\
**Created:** [February 22, 2022, 8:28pm UTC](https://discourse.haproxy.org/t/haproxy-pfsense-acme-unraid-server-cloudflare/7432 "2022-02-22T20:28:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![war1000](https://avatars.discourse-cdn.com/v4/letter/w/dec6dc/32.png) [@war1000](https://discourse.haproxy.org/u/war1000)\
**Post date:** [February 22, 2022, 8:28pm UTC](https://discourse.haproxy.org/t/haproxy-pfsense-acme-unraid-server-cloudflare/7432/1 "2022-02-22T20:28:41Z")

</div>

I really hope someone can point me in the right direction. I have the following setup:

modem → pfsense → managed switch → server (unraid)

- In the unraid server I have 3 dockers

1. speedtest running on http  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/6/61b77b673471b26ac72ab5070b5d093b12ca575c.png)
2. akaunting running on http  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/c/cfb3ce71914c39fc98a8f38faaea5879e0fa98a1.png)
3. nextcloud running on https:  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/c/c09fe048a08826b5051ae16fdbc102ca42c999b4.png)

- In cloudflare I created 3 A records and used Dynamic DNS to update cloudflare dns.  

- In pfsense I used ACME to create the required certificates through cloudflare  

- In pfsense I use firewall rules to open port 80 and 443  

- In HAproxy I created 3 backends

1. speedtest  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/c/c9061ecf7f62caf5d74d4138cc4f96c79ed69d27.png)
2. akaunting  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/0/00592ffdd34b1792df7aa02d6e5fd6be8581bedd.png)
3. nextcloud  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/a/a44af5ee4c4c1a38aa43509cf95791a0cbb5c252.png)

- In HAproxy I created 2 frontends

1. Jarvis (This one is for 443)  
Settings as follows:  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/9/9ca66a639f2a14bc24120ee4de8c4953dfe447c1.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/8/892de2aa9ed6a38b7e8a8b7bce7311c1db1a2ab0.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/4/483a93c0b76397f18d50aa7f564e33b7aa1d9b86.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/f/fcedeeb80d972408b9ae6fbebd1694180f2cbff3.png)

Now here if I try to go to:  
a. [http://speedtest.domain.com](http://speedtest.domain.com) it gives me an error, which is correct as I am not looking for this domain on port 80.  
b. [https://speedtest.domain.com](https://speedtest.domain.com) takes me to the right docker with a validated certificate as it should

HOWEVER,  
c. If I go to [https://akaunting.domain.com](https://akaunting.domain.com) it gives me a “This site can’t be reached error”

I created the following just to test HTTP and I want to remove this.  
2. Jarvis-80 (This one is for 80)  
Settings a follows:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/a/a4519b2ba32affe6c04ecdf6baee19c6c1d8dbb5.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/d/d4f21bd5f061da1368b818c5b60306e1784289ef.png)

d. After creating the above, if I go to [http://akaunting.domain.com](http://akaunting.domain.com), it shows up fine but says connection is not secure.

What am I doing wrong that speedtest shows up properly on https but akaunting does not? Can someone please help me? Nextcloud works fine on ssl