Comment on Jellyfin, Traefik and Tailscale Config Question
zarlin@lemmy.dbzer0.com 4 weeks agoMy setup just has the local IP (of the reverse proxy) in the domain’s DNS records, and I have Tailscale on my server setup to advertise subnet routes, so I can use the same local IP when at home or remote via Tailscale. No need to use your public IP or open ports or anything.
Yes, I know that, but I just don’t want to remember the port numbers or create some bookmarks.
I think I can create a CNAME record for *.media to point to the Tailscale address of the reverse proxy and then use the reverse proxy with Cloudflare API key to serve SSL certificates from my domain.
I am currently struggling a bit with the setup though.
I think I can create a CNAME record for *.media to point to the Tailscale address of the reverse proxy
This approach, but if you setup your server to advertise subnets you can use your local IP range instead of tailscale’s. Port numbers for individual services would be handled by your reverse proxy, you can setup a subdomain route for each service.
Instead of having to keep track of bookmarks you can use something like homepage on the root of your domain, as a dashboard to navigate to all other services.
ScoffingLizard@lemmy.dbzer0.com 2 weeks ago
Fdroid says Tailscale sends logs when it is not authorized. Is that bad? I am looking into Tailscale and might consider Wireguard if it is more privacy-friendly.