this post was submitted on 08 Jun 2023
94 points (100.0% liked)
Free and Open Source Software
17955 readers
4 users here now
If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Caddy is simpler for the reverse proxy. Just sharing for people that get scared when they try to set up Traefik.
Ngnix-proxy-manager is even simpler :) But along with the automatic router creation using labels, I've found traefik to be the most robust of all three.
The traefik syntax and configuration using yaml is really initutive. I can link a good guide here if someone wants it. The official documentation isn't that good.
One of my favourite guides explaining the configuration files for traefik.
Nginx proxy manager is simple, but I can't manage to make it work with https on porkbun. Nginx-proxy works just fine and it's probably the simplest i've seen.
That is pretty cool :) I have a domain on porbunk too but even up putting DNS on cloudflare because porkbum uses cloudflare anyway but doesn't expose most of the features. Kind of a loss loss. Cloudflare works with pretty much everything.
I'll check out nginx-proxy. Have heard good things about swag too. How is the setup on nginx-proxy compared to other options?
I didn't know that about porkbun.
Basically you run the container and then put a couple environment variables in the containers you want to proxy and it handles all of it for you, including certs. Just works.
Thanks. Seems pretty much identical to traefik which makes sense because I think most of reverse proxies just use LetsEncrypt underneath.
Please do! I have been trying to set up remote access to a server I have, and there seems to be so many solutions and all seem very complex.
Have linked one :) For remote access, I wouldn't necessarily use traefik at the edge. The safest solution would probably installing zerotier/tailscale on the remote server and accessing traefik through that. That way you don't have to expose unnecessary parts or worry about robustness of authentication etc.
If it is a single computer you can easily make a two computer network using the instructions from wireguard archwiki page and you're all set :)
Ooh. I signed up for tailscale, but havent gotten the configuration right I think. Also signed up for NextDNS. Got some work to do but no longer have the time.
What I actually want to do is make it so I can give out accounts to services to my family and girlfriend so they can watch movies and whatever.
Tailscale is one step to many. I think I will need to purchase a domain name or set up a VPN, which seems a little scary to me.
I think you might have confused it with something else. I will explain how to what you want :)
sudo tailscaled upor just run the tailscale executable in windows/mac.That's it :)
Hell yes. I can do that. Thank you for the write up!
Happy to help :) Ping me if you need help with firewall or DNS after setting this up and I'll try to help.
Thank you for the offer! I will definitely take you up if I run into any problems.
Honestly I started using traefik first and I agree, the learning curve is steep. I'm only just now starting to understand what my labels are doing. But now, I've tried caddy and literally cannot get it to work, or find how to port what I have on traefik over to caddy lol.
Here are all the steps after installing Caddy to create a reverse proxy with SSL:
/etc/caddy/Caddyfilefilesystemctl restart caddySuper interesting. I'll have to experiment with this, the guides I found were not this straight forward. Thanks!