v3ritas

joined 2 years ago
[–] v3ritas@infosec.pub 1 points 2 weeks ago

Thanks! I'll take a look at that.

[–] v3ritas@infosec.pub 1 points 2 weeks ago (2 children)

nginx + certbot \ acme for certs from my local Step-CA, proper DNS & I just use a WireGuard VPN on-demand for when I leave my house. As soon as I'm off my Wi-Fi I have the VPN active so I don't need to expose anything more than 1 port for that to work =]

I might look at Tailscale, if only because I've seen plenty of people say that's how they connect, so worth looking into =]

[–] v3ritas@infosec.pub 5 points 2 weeks ago (1 children)

It looks like jhdeval mentioned this already, but you may need to review your config file. By default, you would likely have nginx listening on ports 80 & 443 for requests to a specific address (i.e.: jellyfin.domain.com) which would be configured in your DNS, & then nginx would direct the jellfin 443 traffic to port 85 to access Jellyfin. Same principle for Bitwarden. If you have your nginx config files, i \ we could take a look & see if we spot any issues.

[–] v3ritas@infosec.pub 10 points 2 weeks ago (7 children)

I prefer doing nginx on the host (vs a container), & have different configs for each service. You can have multiple services on the same port, it can be controlled via DNS instead (i.e.: access Jellyfin.domain.com & bitwarden.domain.com, both of 443).

Ive tried Caddy once or twice but couldn’t get it working, so i just stick with nginx & cert or to automatically get certificates from my internal CA

[–] v3ritas@infosec.pub 67 points 2 months ago (1 children)

I feel like i repeat this to myself 20 times a day. I can’t stand this administration.