HELP: tailscale funnel -> caddy -> docker apps set
reddit / selfhosted

----------------------------------------------------------------------
mlc1703 · 2023-11-14 21:37

Wondering if anyone can help me out or point me toward some docs.

I currently have a DNS name from cloudflare
[host.xyz](https://host.xyz) that uses zerotrust to proxy requests off
to my Caddy instance which in-turn does a reverse proxy to a couple of
self-hosted apps. For example, I have an apache webserver, navidrome
server, and a dokuwiki running in docker containers. This is all
working as I can, for example, access
[https://notes.host.xyz](https://notes.host.xyz) and access my
dokuwiki page.

I am looking to ditch the zerotrust tier and wanting to use tailscale
to do this but I am confused about the setup needed. I have configured
tailscale on the pi and run the tailscale funnel command so that I can
successfully access a http server running directly on the pi. But, how
do I configure tailscale (and the funnel I suspect) to route traffic
to the Caddy server which will reverse proxy the requests to the
correct docker container?

For example, I want to access
[https://notes.tailxxxx.ts.net](https://notes.tailxxxx.ts.net) from
the internet and have that pull up my dokuwiki site.

Any help would be appreciated.

----------------------------------------------------------------------
thekrautboy · 2023-11-14 21:53

/r/Tailscale?

----------------------------------------------------------------------
mlc1703 · 2023-11-14 22:26

I just found [https://www.reddit.com/r/Tailscale/comments/104y6nq/dock
er\_tailscale\_and\_caddy\_with\_https\_a\_love\_story/](https://www.r
eddit.com/r/Tailscale/comments/104y6nq/docker_tailscale_and_caddy_with
_https_a_love_story/) that looks promising.

----------------------------------------------------------------------
Unrevised0544 · 2023-11-14 23:30

i'm not sure if notes.tailxxx.ts.net will be possible, using magic dns
notes would be a hostname

i created an A record pointing to my tailnet IP and then pointed a
wildcard CNAME to it. in my caddyfile i just reverse proxy
tailnet.ip:port. this way i can spin up whatever service and instantly
have it available at xxx.domain.com but only through tailscale. idk
what the network_paths business in the link is about, and i have also
never used a funnel