Comment on Replacing Cloudflare Tunnel with a Selfhosted Towonel Tunnel
BakedCatboy@lemmy.ml 5 days agoI use a wireguard tunnel as a reverse proxy and it does ssl passthrough with sni. Termination happens on my local box and the reverse proxy host doesn’t do any certs.
moonpiedumplings@programming.dev 5 days ago
What reverse proxy are you using?
BakedCatboy@lemmy.ml 5 days ago
I use haproxy just for simplicity, with the https fronted in tcp mode with a tcp request inspect delay and acls using req_ssl_sni allows switching between multiple backend based on hostname, though if you only had 1 backend server then it could just be a raw tcp proxy. I have my stuff split between 2 local boxes that are both connected to the reverse proxy using wg so this works well for me.