Help wanted - pfSense box to TrueNAS/Nextcloud, with Nginx Proxy Jail with Let's Encrypt?? reddit / selfhosted ---------------------------------------------------------------------- Little-Math5213 路 2023-10-14 06:29 Searching for weeks, for learn this, made me more gray haired.. Can this be done? pfSense box to TrueNAS/Nextcloud, with Nginx Proxy Jail with Let's Encrypt?? Or pfSense to my NextCloud via VPN and Let's encrypt/Cloudflare? I wish to go "online" with my Cloud, safe and secure as possible. History and what I need and have tried: A 55 year old with 30+ years as a sysadmin feeling as a n00b, can not make this work. Apparently working with with Windows servers and Cisco basic Networking don't make me a "Jack of all trades" 馃檮 For decades, I've been happy with my LAN setup at home. Now I want to level up to the Big Boy/Girl Club, And self host my TrueNAS and my NextCloud. Working in a secure environment for decades, made me paranoid about exposing my own stuff in the cloud. But I want to also LEARN these skills! I wish to secure my Cloud as much as I can. Knowing nothing can stop a 0day, I still want to try get my cloud out there. A milestone 馃憤 What I have so far: - My trusted pfSense box, running VPN clients for all my LAN gadgets. - My box in the basement, running TrueNAS Core. - On that Core, NextCloud is installed. (I'm willing to reinstall that Core to harden it!) - I have bought me a Domain name. - Ddns in pfSense works via Cloudflare - Acme Cert service on pfSense works, and issue me the certs I tried. That's how far my skills and found guides online took me. Guides from 2018 to 2020 worked to THERE. After working certs, nothing works *muttering* Tried Proxy downloaded in pfSense to my TrueNas/Nextcloud, no go. Gave up. Tried "Nginx Proxy Jail with Let's Encrypt for your NextCloud." On the TrueNAS via Putty. No go, gave up... Nothing works for me... And my wife kicks this grumpy old man to the garage unless I either start smile or give up. And I'm not giving up! So I ask you, fellow Geeks! How do I securely do this, pfSense, to my TrueNAS Core, to my Nextcloud, ON the internet! 馃檹 Any pointers, guides, links, help, is highly appreciated, from me and my wife! If any CAN help me, I have no idea how to repay you, other than bragging rights and my warm thoughts. ---------------------------------------------------------------------- thekrautboy 路 2023-10-14 06:34 This gives me a headache just trying to read it... Maybe try /r/TrueNAS and /r/NextCloud? /r/pfSense and /r/Nginx also exist, as does /r/TechSupport ---------------------------------------------------------------------- Little-Math5213 路 2023-10-14 07:13 Thanks, that's a good idea. Posted there too. ---------------------------------------------------------------------- DeclaredSins 路 2023-10-14 10:27 Not related to pfSense, but I use cloudflared to expose all of my services. cloudflared doesn鈥檛 require any port forwarding, although I don鈥檛 think you should expose TrueNAS to the internet. I鈥檓 pretty sure it鈥檚 also available in TrueNAS as a package that you can install, but I鈥檓 not sure if it鈥檚 for TrueNAS Core or Scale. ---------------------------------------------------------------------- Little-Math5213 路 2023-10-14 11:01 Thanks for valuable input. I will check this. ---------------------------------------------------------------------- HearthCore 路 2023-10-14 11:17 The next Step would probably be to virtualise all your network to have central access structures rather than run everything over the network - also for performance? Like, setup your beefiest hardware as the Virtualiser (ProxMox) Then setup your TrueNas Core VM, mount the shares within proxmox and then create mountpoints for your individual services setup a backup server and create a redundancy workflow or easily backtrackable tech-hub ---------------------------------------------------------------------- Little-Math5213 路 2023-10-14 11:32 I have a nice physical box for TrueNAS Core. Only 16BG RAM atm, and about 1TB disk space. (4 older SSD's in a "raid") Too small I know, but this box is outside of my normal physical lab server, that's a lot beefier, included 18TB raid. That Media Server, with Plex and stuff runs on a MS Server 2022. At least that's inside my knowledge skills. Isolated on my LAN. IF I ever learn this TrueNAS with Nextcloud stuff, Nginx reverse Proxy and learn to do this safe and secure, I may beef up that hardware too. But until I "master" this skill, I start small. Not wasting $1000's on my home cloud until I know I can secure it :) So yes.. I have the same idea kind of. When all works as a charm, I may install ESXI on my "BIG boy", and run everything from that. But since I reinstall this TrueNAS core every 2 days, and I don't trust my security skills yet, ESXI VM's will wait. ---------------------------------------------------------------------- HearthCore 路 2023-10-14 17:46 That boy totally suffices the usage of a great virtualizer for the home then throw everything you want to have at, in ist kost a system like it for my home needs! ---------------------------------------------------------------------- HearthCore 路 2023-10-14 17:47 That boy should work perfectly for all your local needs than, could also offload the processing and networking for your media server pipeline to the same machine and free up performance, your ms server can do best practice = single duty ---------------------------------------------------------------------- HearthCore 路 2023-10-14 17:47 And then finally be virtualized ;)