47
Reverse proxy (lemdro.id)
submitted 2 years ago* (last edited 2 years ago) by mfat@lemdro.id to c/selfhosted@lemmy.world

I have an openwrt router at home which also acts as my home server. It's running a bunch of services using docker (Jellyfin, Nextcloud, etc.)

I have set up an SSH tunnel between my openwrt router and VPS and can access jellyfin successfully.

I understand that I need to set up a reverse proxy to access multiple services and have https.

But I'm confused if I should set up this reverse proxy on the VPS or on the router itself. Is nginx the easiest option? Should i add subdomains in cloudflare for every service?

Pease don't recommend vpns since they are all blocked where i live (wireguard, tailscale openVPN, etc.) I'm limited to using ssh tunneling only.

Thanks

you are viewing a single comment's thread
view the rest of the comments
[-] just_another_person@lemmy.world -4 points 2 years ago* (last edited 2 years ago)

Firstly...why are you routing your home stuff through a VPS? I'm confused on what is happening here.

If you just want to access your things remotely, setup a VPN server on the router, and connect to it that way. You also dont need a reverse proxy or SSL if you're already accessing things over a secured connection. Where did you get this info from?

[-] Felix_lm22@sopuli.xyz 2 points 2 years ago

Please read the post man, all VPNs are blocked on the protocol level

[-] refalo@programming.dev 0 points 2 years ago

That's not how VPNs work, you can't just "block all of them". I think OP just needs to use a pure-TLS VPN solution (like SoftEther) or an obfuscated one like shadowsocks/obfs from a not-super-well-known provider (or self-host it on a VPS/etc.) and they should be golden.

[-] Felix_lm22@sopuli.xyz 2 points 2 years ago

They sniffing the traffic with DPI and block vpn tech on protocol level, so easy detectable things like OpenVPN, Wireguard and Tailscale doesn’t work anymore

[-] refalo@programming.dev 1 points 2 years ago

I understand, that's why I suggested some non-easily-detectable solutions.

[-] just_another_person@lemmy.world 0 points 2 years ago* (last edited 2 years ago)

That was added later, obviously. Even still, you don't need a VPS for this. This is overly complex .

If SSH works, just forward ports and be done with it.

[-] mfat@lemdro.id 2 points 2 years ago

I don't want to remember port numbers. I'm trying to give each service its own subdomain.

[-] just_another_person@lemmy.world -3 points 2 years ago

Beggers CAN be choosers, apparently 🤦

[-] Felix_lm22@sopuli.xyz 1 points 2 years ago

VPS

You should if your ip is private, not public.

this post was submitted on 05 May 2024
47 points (91.2% liked)

Selfhosted

62903 readers
307 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS