I just learned how to do a reverse proxy using Caddy, tailscale tunnel, and exposing Immich secured by OAuth all in a few hours. Now I’m no longer scared of exposing certain services to the Internet!
As I scan down the comments, I am somewhat comforted to know that I am not the only one. For Caddy being such a simple deployment, it took me an embarrassingly long time to wrap my head around it. Now I can deploy it and have it running in minutes. Looking back, I’m like ‘wtf was my problem?’ Once I learn something and it gels, I write the steps down in a notepad++ doc. At my age, I need all the help I can get. LOL
Yes, its been a long time. But I still remember every line. You remember your first? Mine was some NGINX proxy at the Battle of Netflix.
My server took an arrow from my ISP so I was on foot, slogging through the configuration files. Tech support came running at me, this dumb corporate policy, thinking they could end the rebellion with a single policy blocking port forwarding.
I knocked them with the tailscale. Gods I was strong then. Caved in their double NAT. Probably shattered every iptable they had.
Stood over them, keyboard in the air. Right before I brought it down they said “Wait, wait!”
They never tell you how they all shit themselves. They don’t put that part in the songs. Stupid ISP.
Congrats!
Good job! Took me forever to get my head around it, only implemented once.
Congratulations!! It took me ages to figure out the concept and how it works in practice, and reached the same conclusion as you! It’s nice feeling more secure and also having more freedom over routing
I am still not there yet and admire your perserverance. Any good resources you used to learn all that stuff?
Really depends what you want to do first. After you figure that out, the reverse proxy is arguably the easiest part when using Caddy.
Fair comment, cheers