As subject stated, can i setup NGINX as reverse proxy to a .net kestrel app deployed manually on port number 5000?. Panel doesnt need to support dotnet, that i can manually deploy as a systemd service. Right now iam using aapanel to deploy and the setup look like this Install dotnet runtime manually Deploy dot net app with deployed runtime as target Setup a systemd service to get the things running at port 5000 Add a Nginx site using their php site creation module and set up a reverse proxy to port 50000 and add domain to it. Can this process be replicated here.

hareesh1982 Hello, yes, you can edit the Nginx configuration file for that domain and proxy to port 5000. OpenPanel uses PM2 for managing NodeJS and Python applications, but it can also be used for dotnet, I suggest using that instead of systemd. Because systemd is not available inside docker, you can either setup the app on the server and use OpenAdmin > Users > that user > Websites > Edit Vhosts File to proxy the domain to the system service running on port 5000 - but I don't recommend this as that service will NOT be counted in that user resource usage and can use all the available memory/cpu. Better option is to: Create a user account that has a plan with Nginx webserver *(apache or Nginx are available) Login as root to that user container opencli user-login USERNAME Install dotnet runtime and deploy the application to run on port 5000 with pm2 Add the domain that will use the proxy on OpenPanel > Domains On the same page click on "Edit Vhosts" for that domain Add the proxy to port 5000 and save. This way, the app itself is limited by the user disk, cpu and memory limits. Also PM2 will auto-restart it same way as the systemd does. PS. If you will have more than 1 user/sites that will be using dotnet, I suggesting creating a docker image with dotnet and then that image can be used for new accounts, so that they have net installed and maybe even add your app pre-installed. Feel free to message me for assistance on setting the app or building the image. 👍

mendozal yes, exactly. Docker was using devicemapper storage, which was supported on basically any linux distro. But now the default is overlay2 and they refuse to do any compatibility for devicemapper on newer kernels, so on them, docker just fails to start with overlay. So we have options: A: downgrade the kernel to support devicemapper - which Im strongly against, since then kernel looses all patches and is vulnerable. B: use overlay - this is suitable for VPS where you dont need user disk quotas, since you manage all the users/websites. C: write our own storage driver for Docker - which I tried and failed miserably, since Im not at all familiar with Go and get lost in moby (Docker) source code.. D: Move away from docker - Im experimenting with Podman - which is a drop-in replacement for Docker that keeps 98% of same features, but those 2% include the features that we use, and they are not available just yet. I was hoping that other tools that rely on devicemapper, like Virtualizor, will come up with a solution for transitioning to overlay2, but nothing yet.. So the current plan is to go with option D. - We are slowly moving from the 1-container-per-user setup to container-per-website using docker-compose files per user, which will be run by podman. And eventually to move everything to Kubernetes since it is the new standard.. So @hareesh1982 At this time, if you need disk limits for those 3 dotnet apps, then better to use a bit older version like ubuntu22 where Docker still supports it. And then in the future when we make it work on newer version, I'll be happy to assist you in the migration process.

Support for NGINX reverse proxy

hareesh1982

As subject stated, can i setup NGINX as reverse proxy to a .net kestrel app deployed manually on port number 5000?. Panel doesnt need to support dotnet, that i can manually deploy as a systemd service.

Right now iam using aapanel to deploy and the setup look like this

Install dotnet runtime manually
Deploy dot net app with deployed runtime as target
Setup a systemd service to get the things running at port 5000
Add a Nginx site using their php site creation module and set up a reverse proxy to port 50000 and add domain to it.

Can this process be replicated here.

stefan

hareesh1982 Hello,
yes, you can edit the Nginx configuration file for that domain and proxy to port 5000.

OpenPanel uses PM2 for managing NodeJS and Python applications, but it can also be used for dotnet, I suggest using that instead of systemd.

Because systemd is not available inside docker, you can either setup the app on the server and use OpenAdmin > Users > that user > Websites > Edit Vhosts File to proxy the domain to the system service running on port 5000 - but I don't recommend this as that service will NOT be counted in that user resource usage and can use all the available memory/cpu.

Better option is to:

Create a user account that has a plan with Nginx webserver *(apache or Nginx are available)
Login as root to that user container opencli user-login USERNAME
Install dotnet runtime and deploy the application to run on port 5000 with pm2
Add the domain that will use the proxy on OpenPanel > Domains
On the same page click on "Edit Vhosts" for that domain
Add the proxy to port 5000 and save.

This way, the app itself is limited by the user disk, cpu and memory limits. Also PM2 will auto-restart it same way as the systemd does.

PS. If you will have more than 1 user/sites that will be using dotnet, I suggesting creating a docker image with dotnet and then that image can be used for new accounts, so that they have net installed and maybe even add your app pre-installed.

Feel free to message me for assistance on setting the app or building the image. 👍

hareesh1982

stefan

We have 3 Web APIs, written in dotnet that currently use systemd as a service manager. I like your idea of using PM2 to run the app and point the startup file to the respective dll/executable. I need to try this one myself. Let me dig deeper and come back on this. We are not that well with docker container as working with small team of 3 developers and myself who looks devops.
Another concern is We use Rocky Linux due to the 10 year period. let me first asses the risk of moving away from current environment.

stefan

hareesh1982 to be honest, I hadn't considered RockyLinux since I’m accustomed to Ubuntu and our users preferred Debian: https://community.openpanel.co/d/16-choosing-the-next-linux-distro-for-openpanel/

However, I just installed OpenPanel on RockyLinux 9.4 and there are minor incompatibilities with nginx and bind9 services, which will require a few additional checks. but otherwise, everything works just fine.

Thank you for the idea, and I’ll run more tests and do my best to add full support for rockylinux in the next version: https://openpanel.co/docs/changelog/0.2.2/

EDIT: Just like on Ubuntu 24, there will be no quota support for the RockyLinux edition because its newer kernel does not support devicemapper, which Docker needs for disk limits. source This means you won't be able to set disk limits per user.

mendozal

stefan Just being nosy here. Does this has anything to do with overlay2 vs device mapper? I noticed openpanel supports overlay2 on the installation script.
Or maybe this something else, I'm no docker expert.

hareesh1982

stefan Its always better to have debian based along with RHEL based as many large companies prefer rhel based distros due to selinux.

I think if you make it compatible for rocky, it will work on almalinux, centos stream, rocky and rhel .

stefan

mendozal yes, exactly.

Docker was using devicemapper storage, which was supported on basically any linux distro. But now the default is overlay2 and they refuse to do any compatibility for devicemapper on newer kernels, so on them, docker just fails to start with overlay.

So we have options:

A: downgrade the kernel to support devicemapper - which Im strongly against, since then kernel looses all patches and is vulnerable.
B: use overlay - this is suitable for VPS where you dont need user disk quotas, since you manage all the users/websites.
C: write our own storage driver for Docker - which I tried and failed miserably, since Im not at all familiar with Go and get lost in moby (Docker) source code..
D: Move away from docker - Im experimenting with Podman - which is a drop-in replacement for Docker that keeps 98% of same features, but those 2% include the features that we use, and they are not available just yet.

I was hoping that other tools that rely on devicemapper, like Virtualizor, will come up with a solution for transitioning to overlay2, but nothing yet..

So the current plan is to go with option D. - We are slowly moving from the 1-container-per-user setup to container-per-website using docker-compose files per user, which will be run by podman. And eventually to move everything to Kubernetes since it is the new standard..

So @hareesh1982 At this time, if you need disk limits for those 3 dotnet apps, then better to use a bit older version like ubuntu22 where Docker still supports it. And then in the future when we make it work on newer version, I'll be happy to assist you in the migration process.

stefan

https://roadmap.openpanel.com/