Moving from Duckdns to my own domain re reverse proxy
reddit / selfhosted

----------------------------------------------------------------------
igotabridgetosell · 2023-12-08 00:41

Hey all,

Man, everything worked fine with duckdns, but I ended up buying a
domain just now with porkbun.

So I am trying to figure things out here and not sure if I am on the
right path...

1) Should I be using Ddclient to update my dynamic server ip to
porkbun? saw a youtube video by porkbun for a python script which they
are now advising Ddclient instead?

2) How am I adding my subdomains on porkbun website? am I adding DNS
and if so what type (Address record, TLSA? and what am I putting on
the answer like is there a variable I can use for registered server ip
since I have a dynamic IP?  or am I adding a name server? I am so
confused...

----------------------------------------------------------------------
zfa · 2023-12-08 02:34

1. Easiest topology is to have one and only one record to update with
your dynamic ip. Most people just use their base domain name for this
(eg `example.com`) but you can use a subdomain (`dyn.example.com` or
whatever) if you like. What you use to update this is up to you and
what porkbun support - ddclient, python script, curl call etc.
Whatever works for you.

2. Create CNAMES for all your services punting to the record you use
in step 1 (`example.com`, `sub.example.com`)

3. Yeah, caddy now needs to redirect things based on the records you
use in step 2.


As an aside, if you're happy with how duckdns was updating, there's
nothing to stop you continuing to update that and have the CNAME
records in step 2 point to that, and skip step 1 completely.

*(intentionally assuming all services are on subdomains for
simplicity)*

----------------------------------------------------------------------
igotabridgetosell · 2023-12-08 07:04

hey thanks for this.  I got my plex and jelly working with your help.
Now I am doing the exactly the same thing for ssh but the ssh
connection gets refused.  Is there anything special I gotta do for ssh
maybe?

----------------------------------------------------------------------
TheGratitudeBot · 2023-12-08 07:10

What a wonderful comment. :) Your gratitude puts you on our list for
the most grateful users this week on Reddit! You can view the full
list on r/TheGratitudeBot.

----------------------------------------------------------------------
zfa · 2023-12-08 08:19

Well SSH can't be proxied by Caddy (I don't think??) so the simplest
soln is to open port 22 on your router and forward it to your SSH
host, and then connect directly to the dyndns hostname you defined in
step 1.

note that any and all access attempts to port 22 on your public IP (be
it by ip address or any of the subdomains you have that point to it)
will hit the port forward and therefore your server so before you do
this (that is before you open up port 22 publicly) make sure you've
performed the normal SSH hardneing steps.

Generally thats just means disabling root logins and disabling
password logons so you have to use keypairs at least.

----------------------------------------------------------------------
igotabridgetosell · 2023-12-08 08:49

gotcha, thank you for the tips!