this post was submitted on 19 Nov 2023
1 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
1
Using a reverse proxy for local and external services (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
4 comments fedilink hide all child comments
 

I want to make some services accessible from the ethernet, say my jellyfin instance or something, and some to be available locally only (traefik dashboard, proxmox).

Is there any way to make it so that all *.local.mydomain.com are only accessible from lan? I'm planning to give my local services a local.mydomain.com domain. (traefik.local.mydomain.com, pihole.local.mydomain.com)

top 4 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 11 months ago

https://nginxproxymanager.com/

[–] [email protected] 1 points 11 months ago

caddy + headscale + pihole can do that.

[–] [email protected] 1 points 11 months ago

This is easy with Traefik. Just create one entrypoint for public services in addition to your existing entrypoint. Then point Cloudflare at your new entrypoint and add services that you intend to publicly expose to that entrypoint, then add everything else to the other entrypoint that isn't connected to Cloudflared

[–] [email protected] 1 points 11 months ago

Yes, you can configure a DNS server (or better - two) that serves as an authoritative server for local.mydomain.com and forwards everything to the global DNS servers (eg 8.8.8.8, 8.8.4.4 and 1.1.1.1). You have to use these DNS servers on your devices on a local network (manually or to configure DHCP server to advertise them). I did with BIND because this is what I know but other DNS servers will probably work too.