Reverse Proxy Help reddit / selfhosted ---------------------------------------------------------------------- YodaArmada12 · 2023-12-26 14:28 So I don't know where I'm struggling to do this but here is my setup. I have a Synology NAS where I'm using the Container Manager for my docker containers. I am running Mealie, Homarr, Home Assistant, then the \*arr's. I have a Firewalla Gold for my router and I'm trying to get my wife to use Mealie more so I was hoping to get it easier for her to browse to like mealie.lan instead of hostname:port. From what I've been reading I need a reverse proxy. Inside of the applications do I need to have them point to the proxy for them to work? I've tried NGIX Reverse Proxy Manager but couldn't quite figure it out. Didn't know how to get the dockers to show up there. I also couldn't deploy the Proxy on port 443 so when I deployed it I did 444:443 in my compose file. Was that correct? I'm a system admin by day but know very little about networking other than very basic stuff. I've only been deploying dockers within the last 6-7 months so still kind of new. Any help would be appreciated! Thanks! ---------------------------------------------------------------------- StonehomeGarden · 2023-12-26 14:49 Give Traefik Proxy a try. I found [this article](https://major.io/p/wildcard-letsencrypt-certificates-traefik- cloudflare/) to be helpful. Assuming you don’t want to expose everything to the internet you’d also need to configure your local DNS to point your domain to the Traefik IP. ---------------------------------------------------------------------- YodaArmada12 · 2023-12-26 14:52 Yeah I don't want to expose anything to the internet. ---------------------------------------------------------------------- serengeti76 · 2023-12-26 14:54 You may need to create additional docker networks where your proxy manager and your docker containers you want to expose reside. Traefik is good you can try jc21's nginx reverse proxy as well. Once you figure it out it is quite easy. ---------------------------------------------------------------------- YodaArmada12 · 2023-12-26 14:57 When I use the Container Management on Synology it creates a network for each container unless in the compose file I put -host for the network. Is that what you mean? ---------------------------------------------------------------------- nachopotatos · 2023-12-26 15:37 I am using adguard home as my DNS on network. I did a DNS rewrite for *.my.domain and pointed it to my reverse proxy IP. From nginx proxy manager I have that point the address to the IP and port number of my service. Now anything on my domain goes to NPM and stays local for me ---------------------------------------------------------------------- YodaArmada12 · 2023-12-26 15:39 So my Firewalla Gold is doing my DNS for me and is using Unbound for all my devices but can't figure out how to make pointers in it. ---------------------------------------------------------------------- nachopotatos · 2023-12-26 15:41 Don't know anything about Firewalla, maybe this would be the ticket? https://help.firewalla.com/hc/en-us/articles/360056024294-Guide-How- to-customize-Firewalla-DNS-service ---------------------------------------------------------------------- serengeti76 · 2023-12-26 17:48 I am no aware how synology is set. Can hou ssh to it and use docker cli? Can you use docker-compose? It will be easy to manage it later. ---------------------------------------------------------------------- feo_ZA · 2023-12-26 18:11 Deploy Traefik as a container itself and follow the guide in their documentation to proxy a test container. If you get that working, then you can apply the same config to other containers. For DNS, you'll need to setup A (or CNAME) records to point to the IP address of the docker host and then Traefik will route it to wherever it needs to go. ---------------------------------------------------------------------- Muizaz88 · 2023-12-26 22:46 As someone who uses Docker on a Synology NAS, I can confirm that: 1. Yes, you can SSH into the NAS and run Docker CLI. 2. Yes, you can use docker-compose. 3. Yes, it does make it easier to manage if you use docker-compose over Synology Container Manager. You can't assign it to port 443 because that port is typically reserved for https traffic. Mealie is one of the few apps I personally *wanted* to expose to the internet so that my wife can just add recipes via the Mealie URL from her phone if she stumbles upon one she likes while she's out and about (though I could also just get her to use Wireguard and keep it completely local). I use Swag/Nginx as my reverse proxy. Quick question: Can you currently access Mealie via IP:444?