Reverse Proxy: Difference between revisions
Wikisailor (talk | contribs) |
Wikisailor (talk | contribs) |
||
| Line 6: | Line 6: | ||
It should have a default website that forwards anything that is unknown to the main website. Another redirect should be set up for anything that appears as an IP address because it should be possible to get the IP address, maybe, even though most of the DNS entries at Cloudflare are proxied. I think that there should be a redirect in place for the '''[[MySQL Server]]''' and the SFTP server although it is unlikely to be a problem. | It should have a default website that forwards anything that is unknown to the main website. Another redirect should be set up for anything that appears as an IP address because it should be possible to get the IP address, maybe, even though most of the DNS entries at Cloudflare are proxied. I think that there should be a redirect in place for the '''[[MySQL Server]]''' and the SFTP server although it is unlikely to be a problem. | ||
==SSL Certs== | |||
===[[SSL Config |Self Signed SSL Certs]]=== | ===[[SSL Config |Self Signed SSL Certs]]=== | ||
we can setup '''[[SSL Config |Self Signed SSL Certs]]''' but they are of limited value now as Letsencrypt and Cloudflare origin Certs are so easy to acquire now and at zero cost. The good thing about them though is that they can be a stop gap solution that requires minimal time. further details can be found '''[[SSL Config |here]]''' | we can setup '''[[SSL Config |Self Signed SSL Certs]]''' but they are of limited value now as Letsencrypt and Cloudflare origin Certs are so easy to acquire now and at zero cost. The good thing about them though is that they can be a stop gap solution that requires minimal time. further details can be found '''[[SSL Config |here]]''' | ||
Revision as of 09:59, 16 February 2026
Introduction
The Reverse Proxy will be a Virtual Machines based on Nginx as it is a fairly light install and will be easily capable of forwarding all traffic to the Webservers in the Home Lab.
Redirecting Unknowns
It should have a default website that forwards anything that is unknown to the main website. Another redirect should be set up for anything that appears as an IP address because it should be possible to get the IP address, maybe, even though most of the DNS entries at Cloudflare are proxied. I think that there should be a redirect in place for the MySQL Server and the SFTP server although it is unlikely to be a problem.
SSL Certs
Self Signed SSL Certs
we can setup Self Signed SSL Certs but they are of limited value now as Letsencrypt and Cloudflare origin Certs are so easy to acquire now and at zero cost. The good thing about them though is that they can be a stop gap solution that requires minimal time. further details can be found here