Homelab Progress N°4 #16

Open
opened 2024-09-06 15:52:56 -04:00 by anavarro · 0 comments
Member

Protect services

  • To be able to block clients, Caddy needs to be able to see their IP's, either public or private:
    • If you set up a NAT Hairpin, Caddy is gonna see the public IP of the router, to solve this, you can serve a local DNS in which the services are resolved to the internal IP of the Caddy machine
    • But by doing this Caddy is not gonna be able to get SSL Certificates because the domain name is gonna resolve to the private IP, this is fixable by setting the "resolvers" setting of Caddy to a public DNS like Cloudflare's 1.1.1.1
    • For Wireguard clients, you need to setup the DNS
### Protect services - To be able to block clients, Caddy needs to be able to see their IP's, either public or private: - If you set up a NAT Hairpin, Caddy is gonna see the public IP of the router, to solve this, you can serve a local DNS in which the services are resolved to the internal IP of the Caddy machine - But by doing this **Caddy is not gonna be able to get SSL Certificates** because the domain name is gonna resolve to the private IP, this is fixable by setting the "resolvers" setting of Caddy to a public DNS like Cloudflare's `1.1.1.1` - For Wireguard clients, you need to setup the DNS
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: alecodes/homelab#16
No description provided.