I’d certainly be interested in full details. This sounds like the best of all worlds of not needing to double reverse proxy, not hardcoding internal IPs in the config of a single reverse proxy on the VPS, and not losing the source IP.
Comment on Cloudflare is bad. Youre right.
lucky18391@lemdro.id 4 days agoI also have a similar setup to OP. But I use iptables to forward the traffic over wireguard and I am able to preserve the original client IP by not snat the packets. I then have to use policy based routing to make sure that traffick goes back out through the wg tunnel.
I’m happy to share info on how to get this working.
madasi@lemmy.dbzer0.com 4 days ago
sntx@lemm.ee 4 days ago
Please tell ^^
lucky18391@lemdro.id 4 days ago
I’m not sure what the best way to share this info is. I’d love to write up a blog but not sure how long that would take. I suppose I could just share the wireguard configs here as they include the iptable commands. Will do that tonight when I get a chance.
MigratingtoLemmy@lemmy.world 4 days ago
I’d like a blog please