5 ms·
I'm a fan of both Caddy and Tailscale; any chance you have any devnotes to share on your setup?
by chrisweekly 5y ago
I'm a fan of both Caddy and Tailscale; any chance you have any devnotes to share on your setup?
- mojzu 5y agoMy notes were pretty rough but I've tried putting them into a gist here: https://gist.github.com/mojzu/b093d79e73e7aa302dde8e335945b2cd https://gist.github.com/mojzu/b093d79e73e7aa302dde8e335945b2... Which covers using step-ca with Caddy to get TLS certs via ACME for subdomains, and protecting internal services using client certificates/mtls I then install Tailscale on the host which is running the docker containers, and configure the firewall so that only other 100.* IP addresses can connect to ports 80/443/444. The combination of VPN+MTLS mitigates most of my worries about exposing internal subdomains on public DNS
- chrisweekly 5y agoAwesome, thanks!