Skip to content

NPM reverse proxy — FAQ

Nginx Proxy Manager on TrueNAS — LAN proxy; most public traffic uses Cloudflare Tunnel now. See NPM doc.

NPM-001 — What is NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. NGINX Proxy Manager — web UI for reverse proxy on NAS. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-002 — Where is NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. TrueNAS Docker at 192.168.2.203 — not on Windows PC. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-003 — Still needed after tunnel?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Yes for LAN hostnames and legacy — many public URLs go direct tunnel. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-004 — Admin URL?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. LAN only — e.g. http://192.168.2.203:6081 — check Apps port. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-005 — Admin login?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Vaultwarden search NPM — never expose admin to public internet. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-006 — Add proxy host?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Hosts → Proxy Hosts → Add — NPM doc. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-007 — Websockets?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Enable for Jellyfin, Navidrome, arr, qBittorrent UI. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive:* Network
NPM-008 — Let's Encrypt on LAN?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. SSL tab on proxy host if hostname resolves locally. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-009 — New public subdomain?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Prefer Cloudflare Tunnel first — not NPM unless tunnel points at NPM. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-010 — Tunnel vs NPM path?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Before: Internet→NPM→app. Now: often Internet→Tunnel→app direct. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-011 — When tunnel points to NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. One tunnel entry to NPM — NPM splits hostnames internally. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-012 — Block common exploits?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Enable on each proxy host. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-013 — 502 from NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Backend app down — check forward IP/port. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-014 — Wrong backend port?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Verify TrueNAS app port in Apps UI. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-015 — Docker hostname forward?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Use container name on TrueNAS docker network. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-016 — Path-based routing?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Custom locations in NPM — advanced. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-017 — HTTP to HTTPS redirect?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Force SSL on proxy host. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-018 — Access NPM from phone on Wi‑Fi?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Same LAN admin URL — not via Cloudflare. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-019 — Old local.saxobroko.com?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Legacy CNAME pattern — see Network doc. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-020 — Docs used to use NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Yes — old PC proxied mkdocs; now Cloudflare Pages. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-021 — Delete NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Don't — still useful for LAN even if tunnels direct. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-022 — Certificate expired?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Renew in NPM SSL tab or fix DNS challenge. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-023 — Multiple domains one host?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Comma-separate domain names on proxy host. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-024 — Default 404 host?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Redirection hosts or custom catch-all. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-025 — Header buffer issues?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. NPM custom config — Ryan for weird apps. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-026 — Relation to Cloudflare SSL?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Edge SSL at Cloudflare; NPM SSL for LAN. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-027 — Bookmark admin on PC?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Windows PC at 192.168.2.200 on home LAN. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-028 — Forgot NPM password?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Reset via NPM docs or Ryan — credentials in vault. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-029 — Update NPM container?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. TrueNAS Apps update — brief proxy downtime. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-030 — Logs location?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. NPM UI log tab or container logs in TrueNAS. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-031 — qBittorrent through NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Websockets on — forward to qBT port. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-032 — Jellyfin through NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Websockets + correct stream URL in clients. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-033 — Survivor needs NPM?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. Rare — Ryan handles proxy changes. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-034 — Screenshots in docs?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. npmproxyhosts.jpg, nph.jpg in PC/NPM folder. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network
NPM-035 — More NPM help?

Stack context: Nginx Proxy Manager on TrueNAS Integrated runbooks: Service matrix · NPM

Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

  1. NPM doc, Network. Verify: Repeat the original symptom check — it should be gone or clearly improved. Deep dive: Network