Comment on what's the simple way to map services to subdomains instead of specifying the port number?
moonpiedumplings@programming.dev 3 weeks agoYou can use local certs with nginx proxy manager as well. You can upload certs via the web ui.
Rather than local certs though, I would recommend buying a domain and using it locally, with https. The problem with the local cert approach outlined in the video, is that importing a root cert opens up a big security hole to MITM attacks. If an attacker gets the root certificate, they can now MITM everything else your browser is accessing. You turn the browser from one of the most secure components of a modern OS, into only as secure as the server hosting the root certificates.
The approach I would prefer, is to buy a domain, and use it locally, using DNS-01 challenges to get letsencrypt signed certificates even from within an internal network. Both Caddy and NPM have support for DNS-01 challenges.
myrmidex@belgae.social 3 weeks ago
Thanks for the explanation, something I need to look into!
moonpiedumplings@programming.dev 2 weeks ago
It looks like criticisms similar to mine were offered in the comments of the youtube video you linked at first, and now the youtuber has released a second video, a correction. In this video he uses nginx proxy manager and DNS-01 challenges:
www.youtube.com/watch?v=XEltHEZU6aE
Big respect for doing that.
myrmidex@belgae.social 2 weeks ago
wow super, I’m more familiar with NPM so that would be great. Thanks for the update!!