Comment on What's the real danger of opening ports?

• Lem453@lemmy.ca ⁨3⁩ ⁨weeks⁩ ago

  Traekif can reverse proxy just about anything include ssh.

  That being said I don’t. For stuff like ssh I connect with wireguard first then ssh. For stuff like immich I directly expose that behind traefik so I can share images with others. For stuff like vaultwarden I have that behind traefik but internal only so you need wireguard first then you connect to vaultwarden.local.domain.com

  source
• vane@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  this is nginx / openresty config - upstream is just definition of server / bunch of servers if you do loadbalancing or want to configure stuff you can do

  stream {
    upstream something {
       server xxx:123;
       server yyy:321;
    }
    server {
       listen 666;
       proxy_pass something;
    }
  }
  

  docs.nginx.com/nginx/…/tcp-udp-load-balancer/

  I use openresty with autossl, it renews certificates automatically. The only problem is maintaining subdomain allowance otherwise bots will ddos letsencrypt that would soft ban you to create certificates for new domains / subdomains.

  source