3 ms·
I've a simpler system to use encrypted network for local/private use. - Setup Tailscale on the server and personal device - Deploy apps (self hosted tools tha
by mr-karan 3y ago
I've a simpler system to use encrypted network for local/private use.
- Setup Tailscale on the server and personal device
- Deploy apps (self hosted tools that I use) on the wireguard interface created by Tailscale
- Deploy caddy as a reverse proxy for all these tools and use `.internal` domain
- Use Adguard's DNS rewrites feature to answer custom DNS response for specified `.internal` domains. The A record contains the IP assigned by Tailscale (wg0 interface) for that device.
The Caddyfile is as simple as:
http://miniflux.karan.internal {
reverse_proxy 127.0.0.1:3000
}
Using this setup, as soon as I connect to Tailscale, I can access `miniflux.karan.internal` on a secure encrypted network without worrying about configuring HTTPS for local domains or renewing SSL certs.