Which reverse proxy for public and Lan sites with valid https?
reddit / selfhosted

----------------------------------------------------------------------
peterge98 · 2023-12-06 15:28

I am currently running NPM, in the past I tested pfsense acme with
haproxy, nginx, caddy & linuxserver/letsencrypt. Because I would like
to have sites that are not publicly accessible, I guess I need dns
validation. Currently I am using web on 80 & 443. Settings up nginx
http access doesn’t work in NPM because of my vpn and limited ip
tracking in iOS. Caddy is not optimal, because I need a custom build
for netcup which doesn’t work with docker.

What solution would you suggest and why?

----------------------------------------------------------------------
thekrautboy · 2023-12-06 15:44

If you dont like NPM and cannot use Caddy, try Traefik.

----------------------------------------------------------------------
peterge98 · 2023-12-06 15:51

Traefik does support acme?

----------------------------------------------------------------------
thekrautboy · 2023-12-06 15:57

Of course it does.

----------------------------------------------------------------------
ElevenNotes · 2023-12-06 17:10

Traefik pretty much does everything, I highly recommend it. Use nginx
when you need lua and header manipulation but still behind Traefik.

----------------------------------------------------------------------
PatochiDesu · 2023-12-06 21:50

i use traefik. its included in k3s and works quite well. i have to
admit, it was hard to learn for me.

----------------------------------------------------------------------
RydRychards · 2023-12-07 05:09

I don't know what npm does exactly, but here goes nothing.

I am using linuxservers SWAG container. It automatically renews my
duckdns cert.

For lan i tell my dns (pihole) to hand out local addresses

----------------------------------------------------------------------
peterge98 · 2023-12-08 06:13

Do you have a link to docs for the Dockerfile? Is there any container
image that already includes the dns modules?

----------------------------------------------------------------------
thekrautboy · 2023-12-08 12:33

> Do you have a link to docs for the Dockerfile?

The official Caddy documentation of their Docker image:
https://hub.docker.com/_/caddy

>  Is there any container image that already includes the dns modules?

There are some made by thirdparties that include various extra
modules, easy to find them, but you would need to trust those creators
then. It is safer and very easy to build your own. Up to you.

----------------------------------------------------------------------
peterge98 · 2023-12-08 12:39

Kk I will try this. Just discovered the built parameter for compose,
this would be perfect to integrate the dockerfile which you pasted in
my setup. Thank you!