ACME problem, backend error 502

[netlock-rmm-bot]

RAPALLE (discord) reported:

I have installed the lates version and after hours of figuiring ACME out i then used cloudflare proxy and cloudflare tunnel. i then configured treafik container to only listen to port 80, the webconsole and relay is working but the backend is not

[netlock-rmm-bot]

RAPALLE (discord) commented:
in the docker-compose i have changed the listening port from traefic 80:80, 443:443 to only 80:80.
netlock-rmm-web-console: lables, removed some and changed entrypoint to web instead of websecure and loadbalancer port to 80. netlock-rmm-server: labels: removed some and changed both entrypoint to web instead of websecure and i tryed with backend and relay port 80 and 7080/7081 and 8080/7081.

[netlock-rmm-bot]

RAPALLE (discord) commented:
logs from rmm-server ct, the logs from treafik are empty

root@100-213:/home/netlock# docker logs netlock-rmm-server
OS: Ubuntu 24.04.4 LTS
Architecture: X64
Framework: .NET 10.0.9
Server started at: 2026-06-24 14:06:21

NetLock RMM Server
Version: 3.0.0.0

Configuration loaded from appsettings.json

[Kestrel Configuration]
Http: True
Http Port: 7080
Https: False
Https Port: 7443
Https (force): False
Relay Port: 7081
Hsts: True
Hsts Max Age: 0
Custom Certificate Path: /certificates/certificate.pfx
Custom Certificate Password:

[MySQL]
MySQL Server: mysql-container
MySQL Port: 3306
MySQL Database: o56ysv
MySQL User: okzcwhv0
MySQL Password: YsP1B9cj0bSc0ijj
MySQL SSL Mode: None
MySQL Additional Parameters: AllowPublicKeyRetrieval=True;

Server role (comm): True
Server role (update): True
Server role (trust): True
Server role (remote): True
Server role (notification): True
Server role (file): True
Server role (llm): True
Server role (relay): True

[Members Portal Api]
Api Key Override: 3d835bb3-1c79-4c65-8506-41dcc233bdca-78d17475-681e-4d6d-8934-da5224eb6368
Cloud Enabled: False
Server Guid:

[Logging]
Logging: False

[Environment]
Running under Docker: True

Checking MySQL connection...
MySQL connection successful.
SQL Server version is supported.
Max Concurrent Agent Updates from Settings: 50
Public Override URL loaded from database: nl-backend.rapalle.net
[Agent Backend] No IP Whitelist configured in database. All IPs will be allowed.
[Relay Server] No IP Whitelist configured in database. All IPs will be allowed.

--Package Loader--

-------------------LOADER#1-------------------
Members Portal API enabled.
Members Portal API key is set.

[Version Check] Checking for updates...
[Version Check] OK: Server is up to date. Version: 3.0.0.0

Version matches license & package info.
Online license detected.
License is valid (incl. grace period) until: 2026-08-07 13:51:01
License file ok.
Package name: Open Source
Max licenses: 25
Hard limit: True
License valid until: 2030-12-01 12:00:00
License code signed: True
Package is valid.
Package is code signed.
Agent version: 3.0.0.0cs

Loading packages into memory...

Loading packages into memory done.

[Relay Server] Initializing RSA encryption...
[Relay Server] RSA encryption initialized
[Relay Server] Public Key Fingerprint: SHA256:09:1A:13:57:23:D7:36:9F:72:EA:F5:09:B4:89:04:E5:F5:6E:0B:3E:AC:85:69:C2:FD:E4:28:2B:E9:84:FC:AF
[Relay Server] Public Key cached in Configuration.Server
[Relay Server] IP Whitelist configured with 0 entries.
[Relay Server] TLS disabled - plaintext mode (reverse proxy expected)
[Relay Server] Started successfully on port: 7081
[Management] No Members Portal IPs configured. Management endpoints are unprotected by IP whitelist.
[Agent Backend] No IP addresses are whitelisted. All IPs will be allowed.

Server started.
License info JSON successfully requested from members portal.

[Members Portal License]
Api Key: Configured
License Valid: True
License Package Name: Open Source
License Valid Until: 2030-12-01 12:00:00
License Days Remaining: 1620
License Max Devices: 25
License Hard Limit: True
Code Signed: True
Offline Mode: False
Customer Id: 413977