Reverse proxy

mFat@lemdro.id to Selfhosted@lemmy.world – 47 points –

I have an openwrt router at home which also acts as my home server. It's running a bunch of services using docker (Jellyfin, Nextcloud, etc.)

I have set up an SSH tunnel between my openwrt router and VPS and can access jellyfin successfully.

I understand that I need to set up a reverse proxy to access multiple services and have https.

But I'm confused if I should set up this reverse proxy on the VPS or on the router itself. Is nginx the easiest option? Should i add subdomains in cloudflare for every service?

Pease don't recommend vpns since they are all blocked where i live (wireguard, tailscale openVPN, etc.) I'm limited to using ssh tunneling only.

Thanks

39

You are viewing a single comment
View all comments

Firstly...why are you routing your home stuff through a VPS? I'm confused on what is happening here.

If you just want to access your things remotely, setup a VPN server on the router, and connect to it that way. You also dont need a reverse proxy or SSL if you're already accessing things over a secured connection. Where did you get this info from?

Please read the post man, all VPNs are blocked on the protocol level

That's not how VPNs work, you can't just "block all of them". I think OP just needs to use a pure-TLS VPN solution (like SoftEther) or an obfuscated one like shadowsocks/obfs from a not-super-well-known provider (or self-host it on a VPS/etc.) and they should be golden.

They sniffing the traffic with DPI and block vpn tech on protocol level, so easy detectable things like OpenVPN, Wireguard and Tailscale doesn’t work anymore

I understand, that's why I suggested some non-easily-detectable solutions.

That was added later, obviously. Even still, you don't need a VPS for this. This is overly complex .

If SSH works, just forward ports and be done with it.

I don't want to remember port numbers. I'm trying to give each service its own subdomain.