help with overseerr remote access reddit / selfhosted ---------------------------------------------------------------------- animerb · 2023-12-10 22:05 my current setup is an old windows machine running plex. SABnzbd, radarr/sonarr, and overseer are running through docker on a synology ds416+, which also houses my media data. My end goal is to have overseerr accessible from any web browser on any network for ease of use by at least two remote users, maybe more. I'm tech savvy enough to get all these apps setup and running so that I can access it all on my local network. And I know how to forward ports so that its accessible remotely. But I also know that that isn't secure. And I have no experience with any kind of webhosting, so i'm very confused with all the more secure options out there. I'd appreciate some help in an EILI5 manner. Some folks will say, setup tailscale because its super easy. And this i might do for my own personal usage. But I need another option for my less technical users who aren't going to want to install stuff. I need something that lets them access overseerr through a browser as if it were any other website. I have a domain bought specifically this purpose. i have a cloudflare account, as it seems to be widely accepted ways to securely self host. And this is where I'm stuck. how do I tie my synology/overseerr to that domain name, and do it securely? Like I said, zero webhosting experience. Googling this topic has given me far to vague results, or far too specific results for similar but ultimately different apps and services. Which has left me confused and scared. much like the unfrozen caveman lawyer from SNL. ​ ​ ---------------------------------------------------------------------- HexTrace · 2023-12-11 00:05 Sounds like you need something like Traefik to run a reverse proxy, manage SSL certs, and route an endpoint through a public domain. I went through a similar process recently and used [this video from Techno Tim](https://www.youtube.com/watch?v=liV3c9m_OX8) to get me on the right track. In that video he's setting up internal only access, but you can make a few changes to have Traefik set up something that is publicly visible. There were other videos in a similar vein I also referenced but looking up Traefik for your use case should get you whatever you need in terms of help from youtube. For my setup I wanted Overseer and Tautulli on my VPS so that they were unconnected to my home network - this would allow them to send alerts about Plex status to Discord (via webhook) as well as requested and pending items without being dependent on my home infrastructure. Their footprint is pretty small too so I'm not seeing any issues so far with those + Traefik. This means that when I move in a few months the VPS is going to stay where it is, and all I have to do is ensure there's a working wireguard connection back to my homelab. I went with wireguard instead of tailscale because I set up a point to point connection once, then there's a LAN connection between the VPS and my homelab. If your running Overseer on the same network as the rest of your stack and not using a VPS as a frontend and for your monitoring notifications, then you wouldn't need this. At this point I have it set up so that anyone I've authorized can go to the subdomain "overseer.domain.tld" instead of an IP, and I let Plex handle the authentication for users I've approved and shared my library with. ---------------------------------------------------------------------- Ystebad · 2023-12-11 00:35 Look into a cloudflare tunnel. IMO easier than reverse proxy and also I would argue more secure. Whatever you do don’t just expose it to to the web. ---------------------------------------------------------------------- dudeude · 2023-12-11 01:52 Any reverse proxy would do. I have my overseer behind NPM. To each his own. ---------------------------------------------------------------------- dudeude · 2023-12-11 01:53 And how are his plex users use the overseer if it isn’t exposed to the web? ---------------------------------------------------------------------- dudeude · 2023-12-11 01:55 And to add, my Tautulli newsletter mentions clearly that users can go to http://request.mydomain.com and request what they want ---------------------------------------------------------------------- Ystebad · 2023-12-11 02:04 I meant just opening the ports and allowing direct access. Opening it through cloudflare tunnel or reverse proxy is the goal. Apologies for the confusing statement. ---------------------------------------------------------------------- dudeude · 2023-12-11 02:05 Fair point! I see now what you meant. Makes sense. ---------------------------------------------------------------------- dudeude · 2023-12-11 02:10 I used tailscale with a subnet router setup. The VPS can “see” any device on my LAN too. ---------------------------------------------------------------------- lastditchefrt · 2023-12-11 03:12 More secure for who? ---------------------------------------------------------------------- Ystebad · 2023-12-11 03:55 The host. ---------------------------------------------------------------------- lastditchefrt · 2023-12-11 04:51 If having all your communications potentially being inspected is secure than yikes...