my dashboard shows all 0 "Error: control/clients/find?ip0=(lots of ip's)| Network Error"

[languagemaniac]

Hi there, I have adguard latest version running on debian bookworm. Installed via script not docker

It's been running fine, but yesterday I had the brilliant idea to update my ssl configuration, and I think it's affecting adguard somehow. Now, I don't know much about this, I was just messing around with chatgpt.

The dashboard now shows all 0 when I access via my domain, although I can access the site fine. I can also verify that adguard itself is working fine on local network, it's processing the traffic off the devices that are connected to it via the private dns over that same domain.

Yet when I access the website via my domain, it shows all 0 and an error saying "Error: control/clients/find?ip0=(lots of ip's)| Network Error"

I also don't think there's anything wrong with nginx because other stuff that I have via nginx work fine. So I really don't know if the ssl thing I modified yesterday is the culprit.

But maybe part of the new ssl configuration is somehow not compatible with adguard? So here it is

# Redirect HTTP to HTTPS
server {
    listen 80;
    server_name mydomain.duckdns.org;

    # Redirect all HTTP traffic to HTTPS
    return 301 https://$host$request_uri;
}

# Main server block for HTTPS
server {
    listen 443 ssl http2;  # Enable HTTP/2 for better performance
    server_name mydomain.duckdns.org;

    # SSL certificate files
    ssl_certificate /etc/letsencrypt/live/mydomain.duckdns.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/mydomain.duckdns.org/privkey.pem;

    # SSL settings
    ssl_protocols TLSv1.2 TLSv1.3;  # Include TLS 1.3 for improved security
    ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384-AND-MANY-OTHERS';
    ssl_prefer_server_ciphers on;  # Prefer server's cipher preference
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;

    # Enable OCSP stapling
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 9.9.9.9 valid=300s;
    resolver_timeout 5s;

    # Security headers
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";

    # DH parameters (generate this file separately)
    ssl_dhparam /etc/nginx/dhparam.pem;

    # Buffer size adjustments
    client_body_buffer_size 10K;
    client_header_buffer_size 1k;
    client_max_body_size 8m;
    large_client_header_buffers 2 1k;

    # Timeouts
    client_body_timeout 12;
    client_header_timeout 12;
    keepalive_timeout 15;
    send_timeout 10;

    # Gzip compression
    gzip on;
    gzip_vary on;
    gzip_min_length 10240;
    gzip_proxied expired no-cache no-store private auth;
    gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
    gzip_disable "MSIE [1-6]\.";

    # AdGuard Home configuration
    location / {
        proxy_pass http://192.168.1.137:81/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

some other services below, working fine
}