Can someone explain why a home user should have a reverse proxy & all that sort of stuff?

I need to know more about this… So much to learn.

Couldn’t you just configure the other same service to use a random port? Thats what I did with my Truenas scale server.

I completely understand your frustration with those errors! It’s really annoying how many videos out there either ask for money upfront or lead you on a confusing journey to solve a problem. Especially for someone like me who’s still new to all this, it can be quite overwhelming. I’d really appreciate having someone available for a Discord call to lend a hand now and then. Unfortunately, it seems like nobody in the homelab Discord is that helpful. :frowning:

That’s why I did it at first, and when I decided to start exposing stuff to the internet it was great to already know how it worked.

Would you perhaps be willing to lend me a hand in setting all that up then? I’ve been really eager to get some assistance, but trying to get anyone to respond on the homelab Discord is such a pain in the arse! Haha

What’s a FQDN? People also said I should own a domain name but I have no clue how to even set one up if I wanted to…

That would handle SSL from your client to the Proxy, how do you get the SSL certs to the various other systems? Or does the proxy force HTTP between itself and the service, instead of HTTPS?

Wild that your comment is downvoted. Not even sure what those people are here for.

I do a lot of unnecessary stuff in my home lab just for fun to see how it works.

Meaning port forwarding. Maybe my English isn’t the best when explaining things haha!

Another comment with unnecessary downvotes.

I tried setting it up with WG-Easy on both Proxmox and TrueNAS Scale but couldn’t figure out why my phone would connect but no internet would run through it… I could really use some one-on-one help trying to figure out Tailscale, haha!

Sounds like reddit in a nutshell, lol.

You could, but many prefer a reverse proxy for various reasons.

One thing that the self-hosting community has taught me is that there is no one right way to do things.

You can use ports, but it is more annoying to use. I like not having to remember port numbers and just being able to type ‘someservice.example.org’.

Yes you can, some prefer not to.

I’ve just got traefik reverse proxy working using this guide.Ultimate Traefik Docker Compose Guide [2024]: LE, SSL, Reverse Proxy | SimpleHomelab

Lots of good guides on that site

I would join the Truecharts discord server and checking out https://truecharts.org/manual/SCALE/intro

The discord is great support and after a read and some questions you might find out if its worth it to you, as the setup is complex since its a lot more than just reverse proxy.

You can likely use Traefik in a more simple way to automatically proxy things, but I find it lacking

For self-hosting you really don’t want anyone to do it for you, or to handhold (despite how convenient/attractive that sounds) at the end of the day it is you who will be responsible for maintaining and fixing and updating. Its a struggle and overwhelming at first to do the research and read up on things, but that struggle empowers you to make more informed decisions.

I’m not saying avoid reddit or discord or whatever social communities you enjoy and benefit from, but I am saying that these communities are not a substitute for higher quality sources of information like official documentaiton, and in depth guides or more comprehensive resources. Start small and simple and slowly build up your knowledge.

As to a reverse proxy, from what I’ve heard, Caddy is about as simple as it gets.

Fully qualified domain name

I’ve spun up 2 DNS servers (for that sweet redundancy), both of these tell every device on my network that any http://****.Lan is my reverse proxy.

IE
So I can go to http://portainer.lan (not a FQDN) instead of 192.162.1.54:9443

Your reverse proxy can talk on localhost to a service on the same box, over HTTP to another server, or even over HTTPS to another server, ignoring any certificate errors for its own connection to a backing service.

Since the reverse proxy itself is the only thing talking to your browser it’s the only thing that needs a valid SSL cert. I just have each of my reverse proxies set up with a single wildcard cert like *.my.tld, where all my services are set up like nas.my.tld.