Comment

Comment on My stupidity saved me from being hacked today!

nyakojiru@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago

That’s why I love Tailscale, nothing is open to the internet, all my shit is local lan inside Tailscale. Even better I don’t have to bother with certificates and reverse proxy.

source

Sort:hotnew top

haui_lemmy@lemmy.giftedmc.com ⁨9⁩ ⁨months⁩ ago
Reverse proxy isnt that hard tbh. Btw I have a vpn and my lan isnt open to the web. The router vendor made it look like there was an additional layer of security.

source
qjkxbmwvz@startrek.website ⁨9⁩ ⁨months⁩ ago
Not sure how reverse proxy is avoided this way — do you enter port numbers for your services when you access them, or have one service per machine?

I have a few publicly accessible services, and a bunch of private services, but everything is reverse proxy’d — I find it very convenient, as for example I can go to wap.mydomain.net for my access point admin page, or photos.mydomain.net for my Immich instance. I have a reverse proxy on my VPS for public services, and another one on my lan for private services; WireGuard between VPS, LAN, and my personal devices. Possibly have huge security holes of course…

source
- nyakojiru@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Yep correct hostname:port por each application, all running in the same host on docker. The only thing it would be that any device that would want to connect to an app needs the Tailscale client. And would take over the VPN slot. That’s why they offer exit nodes with mullvad and also DNS privacy resolvers like NextDNS.
  
  source