3 ms·
Something like Cloudflare Argo tunneling would work great for this. No certs at all for the user to mess around with, it terminated on the public internet, not
by pkulak 5y ago
Something like Cloudflare Argo tunneling would work great for this. No certs at all for the user to mess around with, it terminated on the public internet, not in your house.
- throwaway894345 5y agoI guess I’m assuming at least some things are on a private network, in which case things are much more complicated.
- pkulak 5y agoNo, not at all. You can tunnel traffic from any machine, anywhere to be terminated at a public IP.
- throwaway894345 5y agoI think you're misunderstanding the objective. I don't want most of my services (e.g., personal finance, photos, Plex, etc) to terminate at a public IP, that's the whole point of the private network in the first place. So for those explicitly private services, we now need DNS and TLS and in the latter case ideally something like LetsEncrypt so you don't have to manually rotate your certs (but the normal verification methods don't work because your service isn't accessible to LE in the first place--maybe you can run some bastion/proxy?).