I want to make some services accessible from the ethernet, say my jellyfin instance or something, and some to be available locally only (traefik dashboard, proxmox).

Is there any way to make it so that all *.local.mydomain.com are only accessible from lan? I’m planning to give my local services a local.mydomain.com domain. (traefik.local.mydomain.com, pihole.local.mydomain.com)

  • @primevaldarkBEnglish
    1•8 months ago

    Yes, you can configure a DNS server (or better - two) that serves as an authoritative server for local.mydomain.com and forwards everything to the global DNS servers (eg 8.8.8.8, 8.8.4.4 and 1.1.1.1). You have to use these DNS servers on your devices on a local network (manually or to configure DHCP server to advertise them). I did with BIND because this is what I know but other DNS servers will probably work too.