Installing Pterodactyl Panel and Wings Behind Nginx Proxy Manager and Cloudflare

[@brett1234]

Super Awesome Video! Honestly, I've been to hell and back putting in over 100 hours to get this to work. This guide got me through 95% of this installation. One thing you might have glossed over a bit too much is creating a separate Lets Encrypt cert for just the Wings node. I was under the assumption that you were using the wild card cert for both Wings and Panel (that doesn't work). For anyone reading this, at least for me, you need to create a separate node Cert within NPM not using DNS challenge, download that cert, transfer it to your wings box, and use it with the config.yml file. Also, please remember to port forward 8080 and 2022 to the Wings node machine on your router. Thanks again, man. I can sleep now

[@JohnDoe-c5c]

💀i kept reinstalling linux to fresh restart when i kept failing that part no wonder i kept trying same cert

[@wawariors]

I've been trying to install pterodactyl for a week you're my savior thank you for the nice work, worked first try

[@MosaicMushroom]

Thank you so much, after following a few other tutorials first without success, this one finally helped get this working in my environment. If this helps anyone else, after following the instructions and everything being seemingly correct, I was still failing to get a green heart. My problem was that I had only assigned the wings FQDN as a local DNS record, I needed to set as a public DNS record in CloudFlare as well to get it to finally start working.

[@vultrize]

I've watched so many other tutorials and this is the only one that worked for me, Thank you

[@lilciv1200]

Glad you found it helpful!

[@klauudd604]

This by far the best video on Pterodactyl ever, seriously, thank you. I am a total noob to all of this, not just Pterodactyl, complete noob. Your video has been significantly helpful to me, It did take me hours but I had to read up on everything to make sure I understand what's actually going on, and I did run into some issues but by re-watching your videos and re-reading the documents a couple of times, I was able to fix any issues that came up, thank you for creating this tutorial!

[@skeptic-systems]

You can also mount the Pterodactyl wings cert directory in the Docker host of the nginx proxy manager with samba. Then you have to create a simple copy job in the lets encrypt renewl cron job and then you don't have to change the certificate every 3 months

[@lilciv1200]

Good call, you are indeed correct. I've since moved away from this method of relying on NPM, and gone full Cloudflare Tunnel for both the panel and wings.

[@kymotsujason]

Amazing video, worked perfectly and provides a great foundation for me to build off of (slightly more complicated setup with vps reverse proxy).

[@arshadmahmud7057]

thanks bro my life changed for this

[@hagner75]

I got this to work with your video, so thank you! Had to copy paste the signed certificates since WinSCP didn't want to upload it. But this really worked well. Do you know if the bug about CPU usage in docker with Pterodactyl is still relevant today, or was it back then?

[@aidanb1271]

This video was great! Left me with a question though. If I wanted to host multiple servers each with it's own subdomain, how would I go about setting that up?

[@lilciv1200]

Thanks! So you want to host multiple instances of wings right? If that’s the case and these servers are running on the same public IP, just make sure each one is running on a different port for the daemon and sftp. You can make as many subdomains as you want pointing back to that public IP, the biggest thing is making sure the ports don’t conflict with each other

[@aidanb1271]

@@lilciv1200 That wasn't quite what I meant but still helpful regardless. I was wondering how I would go about assigning subdomains to multiple minecraft servers. Would I do that thought NPM assigning the corresponding port?

[@dielolol8196]

Hey I've been following your tutorial and all was working fine until I got to the nginx proxy manager configuration where I followed the tutorial exactly but when I actually went onto the domain I had configured for my panel cloudflare gave me a bad gateway error 502 and said there was an error with the host, I've been trying to fix this for a couple days and have still found no luck so as a last resort I'm asking if you could possibly suggest or help with a solution to this problem? Any help would be greatly appreciated

[@thedarkcr0w]

How do you have nginx and nginx proxy manager on the same machine when both are using port 80 and 443? I'm getting errors when trying to start both at the same time?

[@SiskoUrso]

Thanks so much for this, it helped out as I was curious how to setup with NPM. Have one question though, are you then able to add a proxy host in NPM to the game servers it creates or will that cause issues. Thanks for your time.

[@lilciv1200]

You cannot unforunately, proxy hosts are meant for web traffic. Streams can do something like that though. But not something I have tried.

[@TheLPfunnTV]

Is ther a way to do this: - both on the same Server - Nginx Proxy Manager - With docker In this case the wings node is behind a proxy (I always quit my attempt after the node does not get correctly health checked by the pannel (heart)) - would love to get past this :D

[@markogrmsek9323]

Dude i don't even know how to thankyou...My ass did 15 installs a year a go just to get ssl working. i watch this video yeah why not first try.- everything works Aniways great tutorial

[@lilciv1200]

Thank you! Glad I could help

[@AMian-yf2hn]

Really nice explanation with nuances nobody else speaks ! Good luck on building your channel. I want to build a secure home server (e.g. Ptero) with both WAN (Internet) and "direct" LAN access (without need for internet, "offline" mode): A. How about using Cloudflare tunnels (Wireguard VPN), for SSH, HTTP/S, SFTP etc traffic, in *free* account (as of Aug 2021) instead of port forwarding hassles (maybe you don't have main router access)? Do these CF tunnels operate Linux OS wide, or only carry server (application specific) traffic? Will multiple servers need multiple CF tunnels (maybe better than single CF tunnel)? B. Will nginx proxy only be then needed for LAN security? Any config changes? C. Why not let CF give you a free15 year SSL cert for external access instead of Let's Encrypt 90 day renewal hassles? Also get FQDN from CF (for Internet access) making sub-domain and all other management/routing easier?

[@Jonas_Grimm]

Is this also possible to do without a self signed Certificate? Just with only Origin Certificates from Cloudflare or Letsencrypt and Cloudflare?

[@NationCrazy]

I'm having issues when restarting nginx I get a message saying port 80 and port 443

[@lightechoes]

You've saved my ass, thank you!

[@dellsyngames]

Is there a way to proxy the port 25565 since it is tcp?

[@zoxervy]

where i can get signed cert from letsencrypt? certbot or what?

[@JershBytes]

Just going to post this there , in case you see this! 1. Thanks for this I got The panel setup perfectly 2. I'm seem to be having wings issues. I'm trying to set it up so my friends can play on the servers I host. Any advice or help would be appreciated for that last part from anyone. Again thanks for this video

[@lilciv1200]

hi there! if you're still running into issues, please reach out to my on Discord. username is lilciv.

[@garydavis3125]

Followed the tut to the letter but still getting the red heart and the console only shows the following "This page uses the non standard property “zoom”. Consider using calc() in the relevant property values, or using “transform” along with “transform-origin: 0 0”." The tut though was great and very easy to follow.

[@lilciv1200]

This is a very strange error...I would consider asking this in the Pterodactyl discord. They may have more insights on it

[@garydavis3125]

@@lilciv1200 I figured it out but that's for replying

[@omaryc]

@@garydavis3125 Do you remember what the issue was?

[@garydavis3125]

@@omaryc yes my case was that I had to unproxy my node sub URL in cloudflare.

[@wickedgamingproductions6089]

im having a problem with wings not being able to talk to panel and ideas that might fix?

[@hawolex2341]

Where did you get the signed cert from? we only generated selfsigned

[@lilciv1200]

if you are getting Let's Encrypt certificates from NPM, then you should not be getting a self signed cert. Self signed is only used on the Pterodactyl server itself

[@kok151]

bro, I just want to ask one thing, are you using a local server or VPS?

[@cromatinlp836]

I know its been a while since you've posted this video, but i need your help. The Pterodactyl support server allready said, its out of thier support scope. Its my third time installing all this, and i cant get it to work. First of all: As a signed certificate, i created a cloudflare origin wildcard cert for my domain. I imported that into my nginx proxy manager and i can reach other websites just fine, including the frontend page of the panel itself. Next i've created the wings configuration and started wings for the first time, like you did, got no errors there. But I don't get the beating green heart, the browser console shows a CORS error when I go to the node overview. If i visit the domain of the node directly, i get a SSL_ERROR_RX_RECORD_TOO_LONG error. Help, also by anyone else, would be very appreciated

[@lilciv1200]

You cannot use a cloudflare origin certificate for wings. Those certs are trusted only by cloudflare and are meant to be used when proxying traffic through their network. but you can’t proxy wings through cloudflare. You need to get a signed let’s encrypt cert, and open 8080/2022 directly for wings.

[@cromatinlp836]

​@@lilciv1200 I dont proxy the wings traffic through cloudflare, since the gameserver will the wings domain later on too. I've used the same dual subdomain approach as you did, the ports are opened in my firewall aswell To make this clear for myself: 1. The cloudflare origin cert is importet and used in nginx 2. A self signed cert for the panel for internal use behind nginx 3. A signed cert (for ex. by let's encrypt) for wings. Not imported in cloudflare or anything? Thank you also for the quick reply

[@lilciv1200]

@@cromatinlp836 yes, that should work as you described it

[@cromatinlp836]

@@lilciv1200 Got it working. Thank you so much

[@rainyy8614]

For some reason, pterodactyl panel is just using the self signed cert and not the nginx cert when I go to my website

[@lilciv1200]

it sounds like you didn't configure your Proxy Host correctly in NPM. If you want to reach out to me on Discord, I can try to help you out. lilciv#2944

[@flonki]

Got an redirect error while trying to access the panel over domain ._.

[@lilciv1200]

Try adjusting your cloudflare SSL settings to “Full” or “Full (Strict)” instead of flexible.

[@kelputoo.]

Hi, can you please help me? My node is always going down , the heart in the panel turns red randomly, and i gotta restart docker and sudo wings to make it green again, but its annoying to make this everytime, qhat it can be? The console error displays an error about CORS

[@corbin1680]

Not sure if you're still replying to these comments but I was wondering if that grub line would help with inaccurate memory usage on the server pages? Like I assign 12gb, it says it's using 29gb, free -mt shows I'm only using 16gb on the machine in total, aside from 40gb in cache/buffer.

[@krisclem8290]

Will this method work with a wildcard dns-01 certificate or will I have to use a http challenge?

[@kamarleyj]

Just scaled the entire internet for a decent guide on Pterodactyl with NGINX and Cloudflare Certs. Found yours, fantastic! Was going swimmingly up until that little annoying red heart won't turn green. I'm used to running it on Unraid behind a proxy, but for some strange reason i cannot seem to get it working with port forwarding. Could i possibly request some assistance?

[@lilciv1200]

hi there! you can reach out to me on Discord for some assistance. username is lilciv.

[@kamarleyj]

@@lilciv1200 Sure thing, thanks! Request sent by Marley...

[@EdwynMoss]

Hi there Bud, So my problem, I have is that my MineCraft works perfectly fine, but all my steam games aren't externally accessible. I am using a VPS Solution and trying to do a WHMCS solution if you have any advice

[@BarrenIndex]

9:45 how did you get that can you send a link please?

[@lilciv1200]

are you referring to the signed certificate or WinSCP? if the signed cert, those get exported from NPM after you obtain them. for WinSCP, you can download it from here: winscp.net/eng/download.php

[@BarrenIndex]

@@lilciv1200 thx man.

[@BarrenIndex]

@@lilciv1200 can you help me with domain because is not working for me please help me add me TheKolmax ⚒#6451

[@DzOfcc]

At 16:16 Minutes When I Started sudo wings --debug, but instead it shows a command like this FATAL: [Jul 18 04:20:21.050] failed to load server configurations error=manager: failed to retrieve server configurations: Error response from Panel: _MissingResponseCode: No error response returned from API endpoint. (HTTP/403), Where's the problem, huh? I have followed the long tutorial from the start.

[@johnb9618]

Hi. Awesome video! Just getting an error when I need to access my Panel using my FQDN after NGINX manager config setup. When I access the Panel, I get "Web server is down error code 521" message. I have not configured my nodes yet. Hope you can help. Thanks.

[@lilciv1200]

hi there, if you're still encountering issues you can reach out to me on discord. username is lilciv.

[@Limogley]

Ive followed along the tutorial and its been pretty good but when I try to run wings in debug mode I get the error FATAL: [Jun 23 22:27:30.406] failed to configure docker environment error=Error response from daemon: Pool overlaps with other one on this address space Stacktrace: Error response from daemon: Pool overlaps with other one on this address space Everywhere Ive looked it says to just change the subnet but I have no idea where the config folder for that is. I think my nginx proxy manager is breaking the wings because it was causing issues before with the panel ports. idk what to do now I might have to retry without a reverse proxy.

[@lilciv1200]

hi there, this sounds like you're assigning the same IP to multiple things. would need to see your setup closer to know what's going on.

[@darenwesolowski7959]

Could you provide some info on how to install Nginx Proxy Manager? What package are you using for ftp on ubuntu?

[@lilciv1200]

Here’s a great resource on getting NPM installed: kzbin.info/www/bejne/hmTMnnl5bKyGqJI I am not using FTP, just SFTP which uses the built in SSH process to transfer data

[@RustinceHD]

can i install petro and wings in the same machine as ngnx proxi manager?

[@lilciv1200]

Yes, but you'd need to change the Pterodactyl Panel nginx port to something other than 80/443

[@FatesDesign]

@@lilciv1200 how im getting a bind error on nginx when i restart the service

[@ArkViper919]

in 14:07 having an issue with wings, Fully Qualified Domain Name node1.mydomain gave ab FQDN Error then it just gave this The daemon configuration has been updated, however there was an error encountered while attempting to automatically update the configuration file on the Daemon. You will need to manually update the configuration file (config.yml) for the daemon to apply these changes.

[@ArkViper919]

And every so often while navigating the dashboard im getting Error 504,refresh makes it go away

[@lilciv1200]

@@ArkViper919 i would manually copy the config file to /etc/pterodactyl/config.yml then to `systemctl restart wings` as for the 504, yeah that happens, i haven't been able to find out why, but for me at least it only happens on the admin pages. pretty strange.

[@sullenfps]

I did the exat same thing with no errors, but my heart is red and nothing shows wrong on console :(

[@et.taylor]

did you manage to fix this.... same issue on my end

[@bigbearbeasttv]

I am trying to figure out how your setup is on the cloudflare side. You said at the begining to forward ports 80 and 443 to NPM but I can not figure out how. I have an SSL cert from cloudfare I uploaded to NPM and I got the proxy host all configured but when I connect to the panel, its still showing the self signed cert. Can you help me with setting up the cloudflare side so that is pointing the correct way?m and help me forward 80 and 443?

[@lilciv1200]

If you still need some assistance, reach out to me on Discord: lilciv#2944

[@firinggamers3217]

well if u use ufw u can simply allow the port via the command " ufw allow in from to any port 80" or 443 or if u dont wanna expose the port maybe try the vpn way (zerotier) installs on both machines

[@Punchmememe]

its funny that you use Nginx proxy manager in title but you exacly not using it. Would be lovely if you retitle it. or include.

[@jeremyAr]

Will this work if my isp is behind a CGNAT?

[@jtkiller911]

You'd be best using his other video guide for cloudflare tunnel

[@Robloxtuber1242]

when i tried restarting nginx it came up with a error sudo systemctl restart nginx Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details. \ any reason why this is happening?

[@FatesDesign]

i am getting this as well have you found a way to fix it?

[@aidanb1271]

Hey there, I have a question about how your node1 is setup to have a fqdm. I know you're using cloud flare to do it, what records are you using to accomplish that?

[@lilciv1200]

It is an unproxied (DNS Only) A record pointing to the node’s public IP

[@aidanb1271]

@@lilciv1200 do you then proxy it with NPM? Because otherwise I don't see how it is pointed to a port

[@lilciv1200]

@@aidanb1271 no so port 8080 and 2022 needs to be forwarded to the wings node in your router. Those ports don’t touch NPM because they can’t. 8080 is a daemon port and 2022 is for SFTP. They go directly to the server, not NPM

[@MotoMisch]

Helloooo, Why does the Wings-Server not going through a proxy ?

[@lilciv1200]

hi, with this setup, that setting doesn't matter. it should work either way

[@MotoMisch]

@@lilciv1200 Okay thanks for the quick response! I set up my Server today and I’m not sure if i did it right xD So how is the Wings-Server protected ?

[@lilciv1200]

@@MotoMisch heh, I thought this was a totally different video you were commenting on. Sorry! If you are looking to protect your wings node, please check out my new video instead, which puts the panel and wings through a Cloudflare tunnel instead! kzbin.info/www/bejne/l2S9g5ZvYp5rp9k

[@thomaswilliams5599]

Hi, just a quick question. What IP address would you be connecting to, to actually connect to the Minecraft server from say outside your local network?

[@lilciv1200]

It would be your public IP address - but you need to ensure the required port is forwarded in your router

[@thomaswilliams5599]

@@lilciv1200 okay that is what I was thinking. Thank you very much, I was just a little confused myself haha

[@ImmAsylum]

Hello, I sent you a message on discord as well. I got all the way to adding the node. My node does not connect to the panel. Any help would be greatly appreciated! I can provide any info you may need.

[@awfulcitizen6355]

Why not skip NPM and just do it with CF Proxy?

[@lilciv1200]

You can totally do it that way. That's actually how I do it now, but at the time, I was using NPM for lot's of other things, so that's how I tailored it. Tunnel is a better choice these days in my opinion.

[@sirzento]

Does it work when ptero and npm are on the same system?

[@lilciv1200]

i haven't tried that, but I assume it would as long as you don't have services running on conflicting ports. As NPM is gonna want to take 80 and 443 over, and ptero needs those as well, you may need to adjust your nginx config to make ptero not run on those ports locally

[@firinggamers3217]

yes but u need to run nginx in a different port and run npm in 80 and 443 , creating a non ssl configuration in nginx for pterodactyl and using nginx to forward it (although i dont recommend opening any ports always use vpn tunnels etc)

[@darknodes]

bad you not use 2vm :(

[@redbat1010]

how did you get over the fact that they both wanna use port 80

[@lilciv1200]

If you are running NPM and the Panel on the same machine, you'll need to adjust the panel (nginx) config to use a different port. this is not how i did it, but you can do it that way if needed.

[@redbat1010]

@@lilciv1200 I got super flustered and reinstalled NPM but even without it I got past wings and panel working on the same machine debug was fine. Yet still no green 💚

[@lilciv1200]

@@redbat1010 reach out to me on discord, i'll try to help you out

[@redbat1010]

@@lilciv1200 thank you I will. But not tonight I have had enough for two days. Till tomorrow haha

[@redbat1010]

@@lilciv1200 maybe i'm not good with discord but i cant find you

[@THEPASHKA]

Hello! I followed your tutorial twice. To minimise my error. And yet, after all the install the heart turns green. But in node's "about" section Daemon Version & other stats does not load. And browser's console shows error "504". Please can we go on discord?

[@omaryc]

Did you manage to resolve this?

[@creaper3538]

update plz

[@VileStorms]

node1.blahblah.local needs to be forwarded to port 8080 in the NPM correct?

[@lilciv1200]

No - only use NPM to proxy the panel. 8080 is for wings, just do a port forward directly to the server

[@VileStorms]

@@lilciv1200 hmm thats odd, cause the node just refuses to wake up for me. It notices when I click the node though because it puts my ip in the wings --debug. when I click nodes and goto the console it just says: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at node1.domain:8443/api/system. (Reason: CORS request did not succeed). Status code: (null). when I goto node1.domain It brings me to the default nginx page so it is wanting to go through the reverse proxy anyways for some reason. When I put in node1.domain:8080 it takes me to a "Unable to connect" page EDIT It let me create a server this time so, *Shrug*

[@lilciv1200]

@@VileStorms strange, are you using cloudflare? feel free to reach our to me on discord if you're still running into issues. lilciv#2944

[@VileStorms]

@@lilciv1200 yes I am using cloudflare will do, thanks man

[@VileStorms]

@@lilciv1200 I did it without the reverse proxy, which makes it so i lose out on my media server and all my other services i hosted over that domain, also have to use my cellphone to manage the server since my ISP disabled NAT hairpinning. But at least I have the server working now.