Possible firewall misconfiguration that results in certificate errors

I host a couple of services behind a pfSense firewall, and other services (at the same domain) in the cloud. Inside the network, I have the firewall forward traffic to Nginx Proxy Manager which handles distributing traffic to the correct hosts. When I navigate directly to a subdomain it works flawlessly, regardless of my location, but when I go to the root domain I get a certificate error and sometimes a warning about a rebinding attack. Can I direct traffic targeted at the root domain to my NPM instance as well, or will it always end up at the firewall?

If pfsense is what the IP is pointing at for the root and you are using the pfsense default of listening on 80/443 you will get that error.

:man_facepalming: Thanks, I got sidetracked with a bunch of other stuff and managed to completely miss that. Much appreciated!