Using a reverse proxy for local and external services
reddit / selfhosted

----------------------------------------------------------------------
4ronse · 2023-11-18 21:45

I want to make some services accessible from the ethernet, say my
jellyfin instance or something, and some to be available locally only
(traefik dashboard, proxmox).

Is there any way to make it so that all *.local.mydomain.com are only
accessible from lan? I'm planning to give my local services a
local.mydomain.com domain. (traefik.local.mydomain.com,
pihole.local.mydomain.com)

----------------------------------------------------------------------
RedditSlayer2020 · 2023-11-18 22:03

Yes you can make your reverse proxy listen on your private IP address
for your local subnet

----------------------------------------------------------------------
tech2but1 · 2023-11-18 22:12

Literally half the threads in /r/selfhosted are answers to pretty much
exactly this question.

----------------------------------------------------------------------
4ronse · 2023-11-19 00:02

I couldn't find a solution though.
The problem is that I'm using cloudflared to expose my applications so
all requests practically come from the cloudflared container using
it's ip

----------------------------------------------------------------------
lazyzyf · 2023-11-19 01:07

caddy + headscale + pihole can do that.

----------------------------------------------------------------------
clintkev251 · 2023-11-19 02:07

This is easy with Traefik. Just create one entrypoint for public
services in addition to your existing entrypoint. Then point
Cloudflare at your new entrypoint and add services that you intend to
publicly expose to that entrypoint, then add everything else to the
other entrypoint that isn't connected to Cloudflared

----------------------------------------------------------------------
primevaldark · 2023-11-19 02:41

Yes, you can configure a DNS server (or better - two) that serves as
an authoritative server for local.mydomain.com and forwards everything
to the global DNS servers (eg 8.8.8.8, 8.8.4.4 and 1.1.1.1). You have
to use these DNS servers on your devices on a local network (manually
or to configure DHCP server to advertise them). I did with BIND
because this is what I know but other DNS servers will probably work
too.

----------------------------------------------------------------------
douglagm · 2023-11-19 09:55

https://nginxproxymanager.com/