Best option for fqdn to lan PCs, VMs, and services reddit / selfhosted ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 17:51 Welcome suggestions on best option for being able to use fqdn in place of ip:port for lan PCs, VMs, and services. Not looking yet to expose anything externally to internet. Thanks ---------------------------------------------------------------------- ElevenNotes · 2023-11-18 18:48 DNS. ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 19:01 Could you expand on any particular option for DNS. And regardless, DNS doesn't do ports, right? ---------------------------------------------------------------------- tech2but1 · 2023-11-18 19:11 Define "best". Loads of options, have you even looked? ---------------------------------------------------------------------- RedditSlayer2020 · 2023-11-18 19:19 Any DNS Server will do, you might want search the Web for one that suits you best. I personally use BIND but it fits have a learning curve, Ports don't have anything to do with DNS. While DNS is an alias to your home address, the port is basically the flat number on that address. ---------------------------------------------------------------------- Simplixt · 2023-11-18 19:22 Option 1: Reverse Proxy with [home.arpa](https://home.arpa) domain (encrypted or via self-signed certificate) Option 2: Get your own domain and use Letsencrypt via DNS-Challenge (no open ports needed) With both options, it's great to setup a DNS server like AdGuard Home, where you can create some DNS-Entries, e.g. [cloud@home.arpa](mailto:cloud@home.arpa) to 192.168.0.100 ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 19:41 Yep I've looked. Have PiHole up and running but understand that will only do IP addresses, not ports, so wont help with mapping FQDNs to services running on Portainer, hosted on VMs for example. ​ Unsure whether something like Nginx Proxy Manager will serve my requirements. ​ Best = simple, stable, reliable setup, easy and fast to configure ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 19:43 So can a DNS server do mypictureapp.home to [192.168.1.40:6001](https://192.168.1.40:6001) for example? I have PiHole up and running and didn't think that could do such a mapping (i.e. inbuold DNS server couldn't map to port?) ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 19:44 Thanks for the options, would reverse proxy be able to handle mapping mypictureapp.home to [192.168.1.40:6001](https://192.168.1.40:6001) for example? ---------------------------------------------------------------------- DarkCeptor44 · 2023-11-18 19:56 That's what I have currently, Pihole + Nginx Proxy Manager and it's simple enough because NPM has a cool UI, though I probably did it in a janky way so I'll probably switch to Caddy eventually for easier SSL and to do it "right". ---------------------------------------------------------------------- RedditSlayer2020 · 2023-11-18 19:56 What in "DNS does t have anything to do with Ports" didn't you understand? Ports are only relevant for services running on a computer. ---------------------------------------------------------------------- RedditSlayer2020 · 2023-11-18 19:57 For your example you would need a reverse proxy. Research it to understand how it works ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 20:05 Thank you ---------------------------------------------------------------------- mshorey81 · 2023-11-18 20:22 Not sure if it's the best. I use PiHole and nginx proxy manager with a wildcard let's encrypt cert. In PiHole I direct all *.mydomain.net to my nginx proxy manager. Then in NPM depending on what I'm trying to access, say, sonarr.mydomain.net or overseerr.mydomain.net it will direct to the appropriate IP:port. I also use NPM for externally exposed services. It's just important if you plan on doing this you use access control lists inside NPM to restrict access to proxy hosts appropriately. Hopefully that makes sense. ---------------------------------------------------------------------- Simplixt · 2023-11-18 20:40 Yes, that's what a reverse proxy is doing. It is listening via HTTP/HTTPS port for different domain names, eg. mypictureapp.home, and is streaming the request to the defined destination, e.g. 192.168.1.40:6001 Nginx Proxy Manager (with GUI) or Caddy (via simple config files) are two very easy to setup reverse proxies to achieve this. ---------------------------------------------------------------------- brsh2 · 2023-11-18 21:47 As others have said, reverse proxy is what you want to go from to :. For names, check out [myaddr.tools](https://myaddr.tools) or [ip.addr.tools](https://ip.addr.tools), both made by u/dnschecktool here on reddit and both support Let's Encrypt certificates. ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 22:55 Got pi-hole and npm working together nicely for lan reverse proxy, thank you ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 22:55 Got pi-hole and npm working together nicely for lan reverse proxy, thank you ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 22:56 Got pi-hole and npm working together nicely for lan reverse proxy, thank you ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 22:56 Got pi-hole and npm working together nicely for lan reverse proxy, thank you ---------------------------------------------------------------------- LostGoatOnHill · 2023-11-18 22:57 Awesome, thank you. Got pi-hole and nginx proxy manager working