Externally access lan, outgoing traffic through gluetun
reddit / selfhosted

----------------------------------------------------------------------
dansharpy · 2023-11-24 10:37

Firstly what I'm trying to accomplish:
- Securely connect to home network to access devices/self hosted
services (and pihole for dns)
- Any outgoing traffic goes through gluetun container obscuring my ip

At present I use a wireguard tunnel from my phone to my lan which
works fine but means my ip is my home public ip.
I have a gluetun container setup which I can connect to when I'm at
home using shadowsocks.
If I expose the shadowsocks port on my router I can connect to the
gluetun container remotely but is this a good idea?
I also have a cloudflare tunnel which goes to my reverse proxy via
authelia and fail2ban which I can use if its better than setting up a
dns entry which exposes my public ip.
Or is there a way to connect my wireguard container to the gluetun
container and route traffic that way? (I'm using wg-easy if that makes
a difference)
I have an isp router so no way of installing openwrt/pfsense etc!
Appreciate any help or comments as I'm a bit stuck on the safest/most
secure way to do this!

----------------------------------------------------------------------
Trustworthy_Fartzzz · 2023-11-25 13:01

Can you just set your network_mode on your wg-easy container to
container:gluetun? (Remember to add the VPN port to gluetun’s
definition.)

----------------------------------------------------------------------
dansharpy · 2023-11-25 14:08

That was the first thing I thought but couldn't get it to connect for
some reason! Looked like a routing issue. Set up a tailscale network
now and it's all working as needed!