Comment on Why is everyone using Tailscale?

undefined@lemmy.hogru.ch ⁨2⁩ ⁨months⁩ ago

• uranibaba@lemmy.world ⁨2⁩ ⁨months⁩ ago

  I meant Traefik, sorry.

  Also, why Nginx over Caddy? How does a minimal reverese proxy setup look like with Nginx?

  source

  • undefined@lemmy.hogru.ch ⁨2⁩ ⁨months⁩ ago

    It’s mostly about performance. Caddy’s Go-based garbage collector starts to negatively impact performance at high load. It looks something like:

    server {
        listen 443 ssl http2;
        server_name example.com;
    
        ssl_certificate     /etc/nginx/ssl/fullchain.pem;
        ssl_certificate_key /etc/nginx/ssl/privkey.pem;
    
        location / {
            proxy_pass http://localhost:3000/;
    
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
    

    source

    • uranibaba@lemmy.world ⁨1⁩ ⁨month⁩ ago

      How do you know which headers to set? I couldn’t find any documentation when I last tried (but that was some years ago now).

      source

      • undefined@lemmy.hogru.ch ⁨1⁩ ⁨month⁩ ago

        It can be specific to the web application but generally speaking you’d want to pass the protocol, client IP address, etc.

        source