GRPC Issues on selfhosted (docker) server behind nginx proxy manager

Hi everyone, I was hoping to get some feedback about my server I set up. When I initially set it up, I managed to connect to the web interface and with an android device. Attempting to connect with a linux machine caused an error with grpc context ending early. So I tinkered, got rid of apache2 and installed npm and tried to set it up as best I can. At the moment, I can access the web UI, but can connect neither with Linux or Android. Keycloak authentication works fine on web. Keep in mind I tinkered quite a lot with both the compose, the management.json and the npm structure. The redacted compose file and the management.json are included. Also I attached the "advanced settings" from npm as a seprate file my nginx proxy is set up like this: domain names: netbird.<redacted>.net scheme: http forward hostname: localhost forward port: 10080 (the dashboard) ssl is enabled and forced, with http/2 support When connecting with android I get these message in the management.log
2025/09/11 13:53:23 http: TLS handshake error from 172.18.0.1:43552: tls: first record does not look like a TLS handshake
2025/09/11 13:53:23 http: TLS handshake error from 172.18.0.1:43552: tls: first record does not look like a TLS handshake
where 172.18.0.1 is the host when I try to connect from linux I get this:
2025-09-11T15:45:38+02:00 WARN client/cmd/root.go:248: retrying Login to the Management service in 3.029177039s due to error rpc error: code = Unknown desc = failed while getting Management Service public key
2025-09-11T15:45:38+02:00 WARN client/cmd/root.go:248: retrying Login to the Management service in 3.029177039s due to error rpc error: code = Unknown desc = failed while getting Management Service public key
my hope is to set it up so the nginx proxy manager does the SSL and just forwards everything to netbird. I tried to follow these steps: https://docs.netbird.io/selfhosted/selfhosted-guide#advanced-running-netbird-behind-an-existing-reverse-proxy but as you can see, I messed around with all the settings quite a bit.
1 Reply
Wookimonsta
WookimonstaOP2mo ago
In the management.json I had the certs still in the httpconfig. Got rid of those, and it suddenly worked... Also I can't mark my own message as the solution... Okay it stopped working for reasons beyond me. I think the issue is todo with TLS. When I run netbird on the machine running the docker containers and point it at 127.0.0.1:33073 it works just fine.

Did you find this page helpful?