47
Reverse proxy (lemdro.id)
submitted 2 years ago* by to c/selfhosted@lemmy.world
39 comments fedilink hide all child comments
 

I have an openwrt router at home which also acts as my home server. It's running a bunch of services using docker (Jellyfin, Nextcloud, etc.)

I have set up an SSH tunnel between my openwrt router and VPS and can access jellyfin successfully.

I understand that I need to set up a reverse proxy to access multiple services and have https.

But I'm confused if I should set up this reverse proxy on the VPS or on the router itself. Is nginx the easiest option? Should i add subdomains in cloudflare for every service?

Pease don't recommend vpns since they are all blocked where i live (wireguard, tailscale openVPN, etc.) I'm limited to using ssh tunneling only.

Thanks

you are viewing a single comment's thread
view the rest of the comments
[–] -4 points 2 years ago* (last edited 2 years ago) (1 child)

Firstly...why are you routing your home stuff through a VPS? I'm confused on what is happening here.

If you just want to access your things remotely, setup a VPN server on the router, and connect to it that way. You also dont need a reverse proxy or SSL if you're already accessing things over a secured connection. Where did you get this info from?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (2 children)

    Please read the post man, all VPNs are blocked on the protocol level

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 0 points 2 years ago (1 child)

    That's not how VPNs work, you can't just "block all of them". I think OP just needs to use a pure-TLS VPN solution (like SoftEther) or an obfuscated one like shadowsocks/obfs from a not-super-well-known provider (or self-host it on a VPS/etc.) and they should be golden.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 2 years ago* (2 children)

    That was added later, obviously. Even still, you don't need a VPS for this. This is overly complex .

    If SSH works, just forward ports and be done with it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •