Need some help with keeping an app exposed...
reddit / selfhosted

----------------------------------------------------------------------
homelabfanatix · 2023-10-10 16:55

Background: I have a few apps that are external, DNS through CF, with
Nginx PM for reverse proxy. Everything was working fine, until I
decided to secure things a bit more. I installed Fail2Ban and also
added a custom WAF rule on CF to block by continents.


I noticed that CF was blocking some IPs throughout the day. Later that
night, I noticed that none of my devices were able to access jellyfin.
Looked through the logs and noticed some IP6 addys?
(1234:1235:XXX.XXXX.XXXX.XXX) and noticed a familiar IP addy. CF
blocked the IP. I also checked to see if my local tv ip was listed in
CF, but didnt see it there. I also went through Fail2Ban and noticed
nothing was jailed there. I ended up completely removing F2B and added
an allow IP rule to CF and still nothing. If proxy is disabled on CF
end for that subdomain, it works fine. Not sure if CF blocked the IPs
that were "streaming"...which would be weird as it's only been active
for about a week and the bandwidth usage doesn't too high (2 external
users, every local device is using local ip addy).


I'm basically looking to see get more information on some solutions:


1. if there is a way to "unban" ips/devices from WAF or maybe some
insight on why the allow IP isn't working.
2. is there an option to just get 1 subdomain out of CF and routed
through something else?
3. any other alternative methods to exposing some apps, hide public
ip, security, and without going through CF? figured if CF is involved,
im still going to have the issue of the devices being blocked.

Thank you...

​

----------------------------------------------------------------------
thekrautboy · 2023-10-10 18:00

/r/Cloudflare?

----------------------------------------------------------------------
homelabfanatix · 2023-10-10 18:55

I'll post there also. I was more curious about alternative solutions.
I've been reading up on wireguard, but I don't even know where to
begin with it.

----------------------------------------------------------------------
thekrautboy · 2023-10-10 18:57

Crazy idea, maybe /r/Wireguard? /r/VPN? /r/HomeNetworking?

----------------------------------------------------------------------
homelabfanatix · 2023-10-10 19:15

my bad...meant to post this on a diff sub.

----------------------------------------------------------------------
thekrautboy · 2023-10-10 19:17

No need to apologize.