hi guys and welcome back to another ipro video pleasure to have you back with us thank you for
popping in and checking out our new video this week it's been a very very busy week
here at ibrahim as you know we've got our two bundles of joy to look after but on top of that
we've had a very busy week in our discord and our reddit communities it's been really really
good to see everybody jumping in and having a good conversation about things and bringing knowledge
that they want to share with the rest of the community it's becoming a very inclusive community
and different people from different walks of life um coming in to share their experience you're
looking to kill some time you want to see how other people set up their builds or you want to
share how you set up your build or basically want to learn anything share anything anything you want
pop in and see us enjoy your stay you know we're here for the long term so we've got developers
in there too that are helping us out and helping the community so it's been a really really good
community to see grow and we welcome you to join if you're interested in today's video we're going
to be showing you how to install and set up mesh central which is a remote access application and
allows you to access your machines via your web browser so a much easier way to do remote access
and look up the details of your systems that way i'll be showing you how to install it on unraid
and we're going to go through the steps using our documentation that our team has set up for us
and it's very easy to read and you guys are welcome to follow the written guide which will
be down in the description below if you prefer that as well so if you're looking for a nice
remote desktop remote access application to manage all your machines whether they're virtual or
physical this might be the tool for you if you're interested hang in and let's get stuck into it
so here we are on their main website and as you can see it's compatible with a whole bunch of
different things that you can make sure that it works for you and it's not just
for machines you can also use it for managing databases and managing you know certificates or
anything like that especially using docker so it's been really really helpful to have
running on your server so that you can access things remotely now if you haven't watched
our video from last week about tail scale i will reiterate that guys you really should check it out
because a few of the things that i didn't cover and i learned after the fact included being able
to access your entire subnet and setting the local ip address so you don't even have to use the tail
scale ips you can just set it with your local subnet and access everything as if exactly you
were at home which a lot of people really wanted so it can do that now in addition to this if we
can get something like this set up this will help us even more because we can then access machines
remotely entirely in a nice easy to use interface so on their website we've got management features
and we've got security features so here's their management features here so we can use
remote desktop and terminal real-time ui you can monitor the power state and control the machines
port forwarding support multiple os's you got remote file access server file storage
you can even record your sessions monitor the activity logs and have multiple people working on
the same setup so that's its management features and so here's some of its security features so you
can set two-factor authentication you've got your http content security so for your headers you've
got let's encrypt support strong cryptography ip address token binding reverse proxy support
and a bunch of other stuff that i think is really really nice and comes pre-packaged ready to go as
part of the product so it's very security conscious which obviously you really want
when you're going to be accessing stuff remotely including some of your more sensitive machines
also quickly touch on the main page here so the mesh central page has some great videos and they
do some great walkthroughs of all the individual components of the application and they do a great
job at it so big props to them for that if you're interested go check out their channel mesh central
here and um give them a subscribe give them a like on their videos if you like what they're doing
it's a really cool app so i want to help support the developers here and give them the props they
deserve all i'm going to be showing you today is how to get this working installed and ready
to go on your unraid server i'll also show you how to set it up with orthelia so that you can
protect it and uh you know obviously have orthelia sitting in front of it if you so choose so with
that all said we can now follow our mesh central documentation that we've created and this is to
help you get it going on unraid i'll be following this on i'll be following this off screen but
again the link will be in the description so you can follow along with us if you like we have
some assumptions so you will need the community apps which we have a video on that as you see
it's linked here as well that you're running nginx proxy manager also linked here that you
have ssl certificates within nginx proxy manager and you're using cloudflare as your dns provider
optional is if you have orthelia and you want to use that to cover what we're doing today as as i
said it has its built-in security features which are pretty good already but if you have authority
running and you want to protect this with it then we'll show you how to do that at the end all right
guys so here we are on our main server osiris here and then what we're going to do is head to the app
store head over to apps we type in mesh central and we get mesh central up here as we can see
click to install and we're going to get a bunch of stuff here that we can go through and configure so
the first thing i'm going to do as usual is i'm going to set it to our existing custom docker
network now if you don't know how to do that in the terminal open up the terminal docker
network create and the name of the network and that's done so in here our default port that's set
for the container is 8086 now if that's not taken on your server you can just leave it
if it is remember to change that there the host name will be the hostname which you want
to access it from so for us we're going to make that our main domain here so i'm going to say
mesh.ibracorp.io now keep in mind this is something you are going to have to set in
later steps on our dns provider which is going to be cloudflare so for the reverse proxy field this
is where we need to tell the app where to look for the edge certificate when hitting our domain
so sometimes people will use let's encrypt and that's where you would point this to your reverse
proxy ip so if you currently don't have anything that lives on your root domain you can use the sub
domain which is using the certificate so you can put in your nginx proxy manager external url for
example for me i have a main website that lives on ibra corporate i o so that'll be valid and i'll
put that in there instead as our reverse proxy so using our cloudflare we'll just leave that as 443
combined with our port iframe we're going to leave that as false and allow new accounts
we're also going to leave that as false so what that means is it prevents people from signing up
so be very careful with that by default it's already false but if anything changes in the
future just be mindful of that setting so what it means is people can't come in
create an account and then access everything that you've got which is really important
webrtc doesn't need to change and we don't need to change any of these other settings either so
we're happy with all this pretty much now as it is so we'll go ahead and click apply now while that's
installing what we're going to do is show you how to set up in nginx proxy manager so that we can
come back to this once it's done so here we are in your next proxy manager go ahead to proxy hosts
and we're going to add a proxy host in the domain name we're going to put in the domain that we
said but we would assign earlier so in our case mesh.ibrachor.io for the whole
forward hostname or ip you can use the host name or the container name if you are using
the custom docker network as i have shown you so as you can see all my other ones i haven't
gone back and updated yet i will do that in due time before anyone lets me know but
in our case we can just put mesh central because that's the name that we have for the container
and the forward port is 443 now by default mesh central uses https so we're also going to change
the scheme to https just like that and keep in mind because we are using the container hostname
we can then actually use the container's internal port which is 443 rather than the one that is in
the container template which maps to the host 8086 so in that case we've got mesh central 443 now if
you didn't want to use custom docker network or you wanted to use a different method you could put
the server ip address where you've just created the container followed by the port 8086 which
we set up in the template then tick your websocket support we'll leave these two off because we don't
want caching assets that could cause issues later then head over to ssl so we're going to
select our ssl certificate we're going to force it on make sure all this is checked only do this
if you have followed our cloudflare video on how to set this up and have a cloudflare certificate
loaded into your nginx proxy manager the reason why i always recommend this guys is because if
you're using let's encrypt it expires within a few months i believe which is just annoying you
get a cloudflare certificate it's going to secure you from end to end and it lasts up to 15 years
saves me a lot of time that's for sure so once you're happy with all that you can go ahead and
click save i'll just reiterate one last time these last two options should only be checked if you
have enabled hsts on your cloudflare account if you haven't leave those off so now we're done here
we can head to cloudflare so we're signed into our cloudflare account all we have to do is click add
record and we're going to create a cname and it's going to match what we set in the template that we
want it to be so the name is mesh and the target is you just put an at symbol there and it'll put
the main domain the root domain as the target so then it would be mesh.ibricorp.io go ahead
and click save and that's done in this case we are going to be using a proxy so make sure you've got
the orange cloud so now that that's done we should be able to hit that domain so let's try to do that
so back in nginx proxy manager we're just going to click on mesh.ibricopterio here and sure enough it
takes us to our mesh central page so you'll notice it does allow us to create an account now the
reason for that is because we're the first user so the first user will be considered an administrator
so i would highly recommend that if you're going to be following this video immediately go to this
page and set up your account before anyone else does click create account and create the account
you want so there's all our details we'll go ahead and click create account and there you go that's
now complete so no one else will be able to create an account now because we have the setting in the
template to false which says people can't sign up now if you're using orthelia i'm going to show
you one extra step so that we can make sure we've got everything set up correctly now we've already
covered everything for ophelia in a separate video of course and we've got the documentation on our
doc's website docs.ibracht.io so if you need help with this all that information is in there
so all we need to do is go to advanced and we're going to paste our endpoint configuration in there
this is all pre-configured ready to go we just put it in and we make a change here and here to match
the identifier of what it is we're protecting okay then go ahead and click save so now we pretty much
have orthealia in front of it but there's one extra step that we need to do so here we have
our orthelia configuration.yml so what we need to do is add a rule down here so i'm going to jump
into that now as you can see here's our rules so for our rules we've got sum that allows a bypass
for certain things and then some that will require authentication it's really important when you're
reading these rules that it works from top to bottom okay so if you put a rule right at the
top that says block everything doesn't matter what you put underneath it's going to block everything
so you want to put in order that allows you to filter things down and then the final catch-all
at the end is if it doesn't match anything you've put just block it so in our documentation we
already have the setup um the config there ready for you so you just have to basically copy it
and paste it in here now i've already done it as you can see we've got mesh agents mesh settings
agent control and mesh relay right if you don't have those put those in a little quick tip for
you this is a little bonus for the for you guys using all the rs having the api here as well
will allow those apps to communicate through the api without being restricted by authelia
all right quick little tip one there for you so just there you just add that in under resources
so once you've done that we've got other now protecting mesh central so now that i've laid
off the earlier over the top i'm going to refresh the page and we should be prompted to sign in and
there we are we've been prompted to sign into orthealia so we'll go ahead and click sign in
so now we've pretty much just added the extra layer of protection which makes me feel good
and hopefully makes you guys feel good too so that's the setup done guys right that's
all done we've got mesh central it's ready to go so now you can pretty much start configuring all
your apps or your systems anything you want so what we're going to do is add a windows
machine first thing we do is create a device group so i'm going to click here and give it a name
and i'll call it don't and i'll call it domain servers and for this example we're going to use
manage using a software agent all right we can put a description there a group of our domain servers
click ok and now we have a group right we can expand that and bring it down if we want so the
next thing we do is click add one so we can add a device now so while we've got the option here
we've got windows linux apple mobile device you've got a mesh central assistant windows uninstall
and linux uninstall as well so under windows we've got background and interactive background
or just interactive all right separate things we're going to go ahead and click the windows x64
and download so what i'm actually going to do is run this on our main computer here instead of the
server just to speed things up we'll go ahead and click run anyway and we get this prompt here so go
ahead and click install it's going to ask us if we're sure we're going to go ahead and click yes
then it brings up this terminal and starts writing a bunch of stuff in there
and there you go so our computer's now showing up in the devices list you can now click the
device and use multiple helpful tools such as rdp terminal file sharing and much much more
there's so many features of this application that i can't go through all in this video obviously i
really just want to show you guys how to get it in get it installed get it running
and get you on your way again i recommend you check out the mesh central youtube
channel they've done some great work there and i want to give them the opportunity to
show their product the way they like there's so many features of it that deserve a lot of respect
so if you enjoyed this guys please remember to like and subscribe i really really appreciate
your support and so to my two young boys if you enjoyed what we do here you have any
recommendations or suggestions jump in our discord and let's have a conversation it's a really nice
place in there we'd love to have you thanks guys and we'll see you in the next hybrid court video
you