Enabling HTTPS/SSL

[tcush89 0]

Hi all,

I'm trying to force Emby to https on my Synology NAS. I've tried following the steps at https://emby.media/support/articles/Secure-Your-Server.html but am still having issues.

When I try to connect via https:// at the default port (8920), I get an "ERR_CONNECTION_CLOSED".

I did check my log that I attached in the screenshot, and it looks like there was an error loading the certificate. Originally I thought there may be a permissions issue, so I moved the file to the directory listed in the screenshot and ensured "emby:emby" were the user owner and group owner, but it's still having trouble loading the cert. I did verify that the certificate password is correct. Any ideas?

Thanks!

[tcush89 0]

Okay, I fixed it. Two things:

1. I found this post that also seemed to suggest a permissions error. I think the permissions on the cert were okay (644), but just to be sure, I did what that post suggested: 

   sudo chmod 644 /volume1/@appdata/EmbyServer/ssl/STAR_XXXXXXXXXX_com.pfx

2. Even though I double checked the PFX certificate password and regenerated the cert a second time, I decided to triple check and regenerate the cert a third time. After redoing the cert and chmod 644, HTTPS works like a charm.

[weyon668 8]

Why do you not use a reverve proxy in the synology?

[tcush89 0]

13 minutes ago, weyon668 said:

Why do you not use a reverve proxy in the synology?

I do now have a reverse proxy that forces Emby to HTTPS. I hadn't set it up prior to configuring the SSL cert, which I'm kind of glad about since I ran into issues that were preventing the HTTPS connection lol. But it was not on purpose.

[weyon668 8]

Synology have a reserve proxy option build in. Check this:

https://mariushosting.com/synology-how-to-allow-emby-to-work-over-an-https-connection/

And when there is only that reserve proxy port open to your nas/emby, you always connect with https from external connections.

Edited September 9, 2024 by weyon668

[Audiomixer 374]

On 9/9/2024 at 8:34 AM, weyon668 said:

Synology have a reserve proxy option build in. Check this:

https://mariushosting.com/synology-how-to-allow-emby-to-work-over-an-https-connection/

And when there is only that reserve proxy port open to your nas/emby, you always connect with https from external connections.

This was great. Did this on both my synology nas devices and its working.

Edited September 11, 2024 by Audiomixer

[marnef 2]

I'm using Emby as a package on my Synology, not via docker. I configured the reverse proxy in the system settings and activated the reverse proxy option in Emby. It does not work at all. Is there also a A to Z tutorial on how to setup https for the package installation?

[Luke 42077]

21 hours ago, marnef said:

I'm using Emby as a package on my Synology, not via docker. I configured the reverse proxy in the system settings and activated the reverse proxy option in Emby. It does not work at all. Is there also a A to Z tutorial on how to setup https for the package installation?

Hi there, what exactly do you mean by "does not work at all". Lots of people around here use that. What exactly did you do?

[Carlo 4560]

On 10/30/2024 at 2:01 PM, marnef said:

I'm using Emby as a package on my Synology, not via docker. I configured the reverse proxy in the system settings and activated the reverse proxy option in Emby. It does not work at all. Is there also a A to Z tutorial on how to setup https for the package installation?

Did you get it setup and working?

[Luke 42077]

@marnef?

[marnef 2]

I finally changed to docker and now it works

I really love Emby!!!

[marnef 2]

What my problem finally solved: The reverse proxy on the Synology can be configured to use any https port to the outside, but the internal port to Emby must be configured as http. I would never have thought that the internal port shall be non-SSL. Now it has been working perfectly for weeks.

[Carlo 4560]

It can use https to the inside as well but it's a more complex setup and since this is a home media server running on the same machine as the proxy, there is little gained by doing it.
What you setup is perfect IMHO

Carlo