Reverse proxy is not specifically for exposing a containerised service on internet, it also helps to enable SSL for all services via single reverse proxy on LAN.
- 12 Posts
- 13 Comments
Joined 2 years ago
Cake day: October 4th, 2023
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
If you want to expose a container based service just for yourself over internet, you can -
-
If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].
-
If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].
In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default you should set your firewall to block all incoming request from anywhere except LAN.
I’m personally using Cloudflared Tunnel, but planning to migrate to Tailscale.
[1] https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-ubuntu-20-04
[2] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
-
AdGuardHome is also self-hosted and does have this feature.
Actually in my cases, I have to block Facebook on all of my devices, but want to allow it for rest of my family members. So, I know its possible in AdGuardHome.
https://github.com/AdguardTeam/AdGuardHome
For which self-hosted app? Invidious?
Unless you are routing traffic through a VPN.
That’s correct. Thanks for the correction.
- AdguardHome/Pi-Hole (for DNS Filter)
- DrawIO (MS Visio equivalent)
- Invidious (Youtube privacy frontend)
- SearxNG (Google Privacy frontend)
- Vaultwarden (Self-hosted Bitwarden server)
- Miniflux (RSS Reader)
- linkWarden (Link aggregator)
Also, checkout https://selfh.st/apps/
2·7 days ago“Requires to create an account” for what exactly? I’m a long term Ubuntu user without any Ubuntu one account.
Ubuntu Core, to be specific.
It’s an open source product, in case you have concern about possibility of malicious code embedded within it.
Why not Traefik as reverse proxy?
The only reason the menace is can’t be weed out because both local politicians and cops get their cut from these type of Business. So, if you shut down one, 4 more open up next day.
India has a huge pool of English speaking educated young people with no access to decent paying jobs after college. These scam centers offer them easy money.