homelab

171 readers

1 users here now

founded 4 years ago

MODERATORS

CMonster@lemmy.ml

Setting up certs for inward facing services (lemmy.ml)

submitted 1 year ago by internet_user@lemmy.ml to c/homelab@lemmy.ml

10 comments fedilink hide all child comments

Hey all,

Hope this is the right place to be asking (Reddit refugee), but do any of you setup certs for inward facing services? For example, I run "Whoogle" on my proxmox server, which I then access from several other devices when performing searches.

The connection between my machines and that proxmox VM are not encrypted, however only my VLAN (for personal devices) is able to access it.

Is it good practice to create a certificate for those types of servers that can only be accessed within your own network, or overkill?

you are viewing a single comment's thread
view the rest of the comments

[–] internet_user@lemmy.ml 1 points 1 year ago (3 children)

Gotcha. NGINX is just for serving externally usually, right? I've heard about it, but never used it. Have you heard of certbot before? I may look into it, for practice if nothing else.

[–] Krafting@lemmy.world 1 points 1 year ago (2 children)

No, it can be used internally too, it's a reverse proxy, I didn't know anything about this until I tried it! it also allow you to your website without ports behing (for exemple video.lab.home instead of video.lab.home:8096 for jellyfin)

Also, certbots, if i'm not mistaken, is only used for public facing domains, for domains like .local and .home and anything that you use to resolve domains internally will not work.

Except maybe if you use a real domain to point to your internal local IP, which I find too weird but it works ahah

[–] internet_user@lemmy.ml 1 points 1 year ago (1 children)

Oooo, I'm going to have to check out NGINX then! I was thinking of adding a custom DNS entry in PiHole so that I could talk to Jellyfin directly with a URL, but I would still need the ports since DNS doesn't care about/ handle port information. Thank you!

[–] Krafting@lemmy.world 2 points 1 year ago* (last edited 1 year ago)

Yes, you'll learn a lot, like I did few months ago! Have fun :)

Edit: The software is "NGINX Proxy Manager", to have an All in one solution. if you just use NGINX it might be more complicated!