Dave811

joined 1 year ago
[–] Dave811 1 points 11 months ago (1 children)

To be clear I ran that on my reverse proxy server. In the tailscail dashboard you also need to enable the subnet

[–] Dave811 1 points 11 months ago (3 children)

I didn't try that, I use the static local ipv4 address of my network. Like http(s)://192.168.1.3:443

[–] Dave811 4 points 11 months ago (5 children)

So my post was the one to get rid of the cloudflare tunnel.

Basically I set up a tailscail docker on my home server and connected it with a one time key from tailscale. There I exposed my local network. (Perhaps secure that only to your homeserver IP)

Then I set up a Debian Server which hosts a lot of other stuff. But there I also installed tailscail and connected it to my account.

After this the most important part! I wasted hours to find this line of code sudo tailscale up --accept-routes With that you allow the external server to accept routes. Otherwise you can't redirect to your homeserver

The next step I took was to install nginx and setup a reverse proxy to my traefik docker on my home network

Here I routed the domain with every subdomain (*.your.domain) to my homeserver.

My homeserver took care of the https certificate so my nginx server only redirects traefik from port 80.

I can share my configs later but I have a little problem with large nextcloud uploads. And I don't have the previously working nginx config anymore.... So I need to dig a bit further again.

Ask me questions, but I can only answer them in about 7h Hope my late night writing makes sense.

[–] Dave811 1 points 1 year ago

So here is the setup for truecharts with traefik and the things needed for proper truecharts setup: https://truecharts.org/manual/SCALE/guides/getting-started

Do you also use cloudflare tunnel?

[–] Dave811 1 points 1 year ago

As others suggest tailscail also, I will try it out, but in the long run I will try to setup wireguard.

[–] Dave811 1 points 1 year ago

Thank you! I will have a look at it.

[–] Dave811 1 points 1 year ago

You are right, that's why I wanted to switch to another tool or service. In the short run it would be perhaps tailscail and in long-term perhaps wireguard.

[–] Dave811 1 points 1 year ago

I think the problem with truenas is, that it wouldn't have a docker solution for that. And custom packages would be deleted if I am not mistaken. So for 2 VPS this would probably be the go-to solution

[–] Dave811 1 points 1 year ago

This sounds interesting as well. But then I couldn't connect from the lan to the truenas server I guess.

[–] Dave811 1 points 1 year ago

There is even a truechart available, I will try it out

[–] Dave811 1 points 1 year ago

I will try tailscail out, because it has its own turechart. But wireguard is my go-to if I get it working. Thx

[–] Dave811 1 points 1 year ago (2 children)

So I use traefik on my truenas server from the truecharts catalogue. If you need help there I can send you the corresponding links from the truecharts website later, I am not at the computer right now.

 

Hi, I moved this year to another city, because my internet provider didn't give me a dedicated ipv4 address I can't use a dyndns like duckdns. Another thing to mention is, that I have a dslite tunnel. So I can't set up dyndns...

So my recent setup is a truenas server sitting under my desk. This is connected via cloudflared to the cloudflare tunnel. There I have my services like seafile or nextcloud configured. They are all pointing to a traefik instance that routes the traffic to the right container.

So to summarize what I have:

  • Truenas server
    • multiple services
  • dslite tunnel
  • own domain
  • Cloudflare tunnel
  • v-server
    • Nginx
    • docker

To visualize the route the traffic is going

Internet - cloudflare tunnel - cloudfared docker - traefik docker - service (nextcloud) docker

So I want to setup something on my v-server that routes the traffic to my homeserver (truenas)

Internet - DNS (cloudflare) - v-server - (magic docker service on truenas) - traefik docker - service (nextcloud) docker

Does someone have an idea how to solve this?

view more: next ›