FQDNs for lan bare metal PCs, proxmox VMs and services
reddit / selfhosted

----------------------------------------------------------------------
LostGoatOnHill · 2023-11-14 00:44

Hi,

Have a bunch of PCs, VMs, and services like pihole self-hosted. Still
using their IP:port to reference. Obviously would prefer to use FQDNs.
Understand something like pihole DNS server could be used for IPs, but
doesn’t allow for unique FQDNS for IP:port combos.

Suggestions for simple, lightweight solution most welcome, thanks

----------------------------------------------------------------------
lesigh · 2023-11-14 01:13

Buy a domain, use reverse proxy service like traefik, caddy, npm.

----------------------------------------------------------------------
mpopgun · 2023-11-14 01:25

I second this, I used npm (nginx proxy manager). Then I use a simple
dashboard like heimdall to keep up with all my services and servers.

Nginx will handle your ssl certs automatically if desired and you can
put any or all of your services behind a Nginx login prompt.

----------------------------------------------------------------------
NikStalwart · 2023-11-14 02:38

TL;DR buy a domain, set up a reverse proxy within your LAN, delegate
your domain's nameservers to a nameserver running in your LAN, or just
point a wildcard subdomain to your reverse proxy's static LAN IP, then
use the reverse proxy to...uhm....proxy your traffic.

Use Let's Encrypt DNS-01 challenge to get trusted TLS certificates for
each host.

Good luck.

----------------------------------------------------------------------
[deleted] · 2023-11-14 08:24

[removed]

----------------------------------------------------------------------
LostGoatOnHill · 2023-11-14 12:14

Thank you!

----------------------------------------------------------------------
LostGoatOnHill · 2023-11-14 12:15

Seems there is a consensus, thank you for the guidance

----------------------------------------------------------------------
LostGoatOnHill · 2023-11-18 16:29

If I don’t want to expose any self hosted services externally, will
npm still allow me to map fqdns to ip:port and reach services using
the fqdn from cli terminals, browser etc?

----------------------------------------------------------------------
NikStalwart · 2023-11-19 00:21

> If I don’t want to expose any self hosted services externally, will
npm still allow me to map fqdns to ip:port and reach services using
the fqdn from cli terminals, browser etc?

I don't know what node package manager has to do with anything here.

I will reiterate what I said in my original comment:

> delegate your domain's nameservers to a nameserver running in your
LAN, or just point a wildcard subdomain to your reverse proxy's static
LAN IP, then use the reverse proxy to...uhm....proxy your traffic.

So, for my own network, I have a BIND9 server running with public and
private "views" of the DNS zone. The public view is AXFRed to public-
facing DNS provider. Clients from local subnets get the "private" view
which maps the FQDNs to LAN IPs.

----------------------------------------------------------------------
LostGoatOnHill · 2023-11-19 06:30

npm - nginx proxy manager. Gotta love multi use acronyms. Thanks for
the feedback. Up and running with PiHole & NGINX PM