Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)H

harsh3466

@ harsh3466 @lemmy.ml

Posts
3
Comments
192
Joined
3 yr. ago

  • Deleted

    Permanently Deleted

    Jump

  • So people will get something like .25 USD?

  • Please check my setup.

    Jump

  • Ah. Yeah. I think then you'll want to look into cloudflare tunnels. I believe that should get you through the cgnt and deal with the dynamic IP ll in one go.

  • Please check my setup.

    Jump

  • You can deal with the non-static IP by using duckdns.org

  • Amazon's Stock Clearance: Upgrade Your TV with Amazing Fire TV Stick Discounts

    Jump

  • Fuck Amazon.

  • FTC Says Social Media Platforms Engage in 'Vast Surveillance' of Users

    Jump

  • FTC says water is wet.

    Edit: in all seriousness, it’s good that the FTC is talking about this, and it’ll be even better if it does something to combat it.

  • Deleted

    Permanently Deleted

    Jump

  • I so look forward to seeing an ad when I pause a video to inspect whatever is on the screen at that moment.

  • Book recommendations to learn programming fundamentals

    Jump

  • Found it. Thank you!

  • Bots are running rampant. How do we stop them from ruining Lemmy?

    Jump

  • I mean, you could charge like $8 and then give the totally real people that are paying that money a blue checkmark? /s

    Seriously though, I like the idea, but the verification has got to be easy to do and consistently successful when you do it.

    I run my own matrix server, and the most difficult/annoying part of it is the web of trust and verification of users/sessions/devices. It’s a small private server with just a few people, so I just handle all the verification myself. If my wife had to deal with it it would be a non starter.

  • Generative AI creates playable version of Doom game with no code

    Jump

  • Correct me if I’m wrong, but doesn’t there have to be a code layer somewhere in there?

    It’s like all those “no code” platforms that just obscure away the actual coding via a gui and blocks/elements/whataver.

  • Smart sous vide cooker to start charging $2/month for 10-year-old companion app

    Jump

  • Translation:

    “Fuck you for not replacing your perfectly fine and still working 10 year old machine and making our line go up more. We’re gonna do our best to brick it because we want all of your money.”

    Fuck capitalism. I will (and have been) doing my absolute to avoid buying any kind of physical device that requires an app to function

  • What's your favorite book that you wouldnt say is a masterpiece?

    Jump

  • I love this series as well. Definitely not a masterpiece, but it is great sci fi.

  • Should I use a reverse proxy in a homelab?

    Jump

  • So, this took way longer than I thought it would, mostly because I needed the time to sit down and actually type this up.

    Full credit, I followed the instructions in this video from Wolfgang’s Channel

    Prerequisites (this is based on my setup, the api key requirement will vary based on your domain registrar/service):

    • Docker & Docker Compose
    • NGINX Proxy Manager running via Docker
    • A registered domain to use for your lan
    • An API key from your domain registrar/service

    I’m running NGINX Proxy Manager, using this docker-compose.yml, which I got straight from the NGINX Proxy manager website.

     
        
version: '3.8'
services:
  app:
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

    I’ve got my domain managed by Cloudflare (yes, I know they’re evil, what company isn’t?), so these instructions will show setup using that, but NGINX Proxy Manager supports a whole bunch of domain services for the HTTP-01 challenge.

    With all prerequisites in place, here are the steps:

    • Log in to your NGINX Proxy Mananger (you can access the service and login at port 81 of the machine hosting it)
    • In the top menu, click the SSL Certificates tab
    • Click the Add SSL Certificate button
    • Choose Let’s Encrypt for the certificate type
    • In the Add Let’s Encrypt Certificate dialog, input the following
      • Domain Names: Input the domain root, as well as a wildcard subdomain. You’re entering both domains into the same field. After entering each domain, press the enter/return key on your keyboard to confirm the domain. For example, if you domain is abcde.com, input:
    • Email Address for Let’s Encrypt: Any valid email address you’d like to use
    • Toggle the Use a DNS Challenge option on (when you toggle this on, a new set of options will appear)
      • DNS Provider: Choose yours. I chose Cloudflare
      • Credentials File Content: Delete the prepopulated dummy api key and paste in your actual api key
    • Propagation Seconds: I put in 120 to give it two minutes. You can try leaving it blank, but if the DNS records haven’t propagated, you may get an error (I did when I tried leaving it blank during setup).
    • Toggle on the I Agree to the Let’s Encrypt Terms of Service option - Click Save

    Once you get a success message, you can start creating proxies with NGINX Proxy Manager for your internal domain. To do that you will need the ip address and port you are forwarding the domain to for your lan service. If you are using Docker containers, you’ll need the Docker ip, which you can get from the command line with:

    ip addr show | grep docker0

    You should get an ip address like 172.17.0.1

    Otherwise you’ll just need the ip address of the machine you’re running the service on.

    To set up a proxy redirect:

    • In NGINX Proxy Manager click the Hosts tab/button and then choose Proxy Hosts.
    • Towards the upper right click the Add Proxy Host button
    • In the New Proxy Host dialog box, input the following:
      • Domain Names: input the domain address (subdomain or tld) you wish to use for the service. For example. homepage.abcde.com, then press enter to confirm the domain
      • Scheme: leave set to http
      • Forward Hostname/IP: Input either the host machine ip, or the docker ip
      • Forward Port: Input the appropriate port for the service
      • Cache Assets: Toggle on
      • Block Common Exploits: Toggle on
      • Websockets Support: Toggle on if the service needs websockets
      • Click the SSL tab of the New Proxy Host dialog box to set up the ssl certificate
      • In the SSL tab, input the following:
        • Click the None under SSL Certificate and select your local domain + wildcard subdomain certificate
        • Toggle on the Force SSL, HTTP/2 Support, HSTS Enabled, and HSTS Subdomains options
        • Click Save

    Once the save is complete you should be able to input the new domain for you lan services and get a secure connection.*

    *Bear in mind some services require you to specify a valid domain for the service within the config/settings. Double check any services you may be running for this if you plan to use a reverse proxy with them.

  • Should I use a reverse proxy in a homelab?

    Jump

  • This is exactly how I have mine set up and I really like it.

    I’ve got an internal and external domain with a wildcard cert so if it’s a local only service I can easily create a newservice.localurl.com, and if it’s external I can just as easily set up newservice.externalurl.com