Comment on Is they're an easy way to make my Jellyfin accessible outside of my home network
ohshit604@sh.itjust.works 1 day ago I can’t be much of a help with Caddy however, for Traefik you can use the OIDC Middleware to forward requests to your authentication service.
Plus I worry I set something up wrong and expose my network
The only port that would need opening is :443, leave port :80 closed so that people cannot connect to your services insecurely. Slap fail2ban or geoblock on it and call it a day.
Also, DDNS allowlist for that deny-first approach.
ridethisbike@lemmy.dbzer0.com 1 day ago
The current config routes through the cloudflared tunnel so no ports are open externally at the moment, so that’s nice, but yea, I’d have to imagine there’s some documentation out there for caddy.
Caddy has been a pain, though, so I might give one of the others a try. Thanks for the tips!