this post was submitted on 28 Nov 2023
2 points (100.0% liked)

Self-Hosted Main

511 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
2
How to "reverse Proxy" to my self hosted service (like cloudflare tunnel) (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
9 comments fedilink hide all child comments
 

Hey Guys,

currently I'm using cloudflare tunnel to hide the IP the services I'm hosting without opening a Port. However I was able to aquire a cheap VPS. Is there a way to create a "cloudflare tunnel" like system? I had an Idea, but was not able to finish implement it.

Obviously the easy solution would be, host a swag (reverse proxy) container on the vps and open some ports on my local router (one per service) and use duckdns to come around the non static IP issue.

However, I'd prefere not to open ports at home, I quite like the idea of the non port forwarding cloudflare tunnel solution.

So I was thinking I could connect the two sites via wireguard, allow the VPS to access my docker network which runs all the services and then forward the traffic which goe through the reverse proxy (like shown in this picture).

​

Any Ideas if this is feasible and I'm open to other suggestions, I'm right now in the phase of solution finding, so everything is welcome, especcially when it comes with a tutorial.

​

Have a great day, Autchi

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 11 months ago

Your reverse proxy, as well as the upstream services, can all live inside your wireguard vpn. Of course this eliminates the need for having a registered domain or ssl encryption or publicly exposing the reverse proxy.