Hey Guys,

currently I’m using cloudflare tunnel to hide the IP the services I’m hosting without opening a Port. However I was able to aquire a cheap VPS. Is there a way to create a “cloudflare tunnel” like system? I had an Idea, but was not able to finish implement it.

Obviously the easy solution would be, host a swag (reverse proxy) container on the vps and open some ports on my local router (one per service) and use duckdns to come around the non static IP issue.

However, I’d prefere not to open ports at home, I quite like the idea of the non port forwarding cloudflare tunnel solution.

So I was thinking I could connect the two sites via wireguard, allow the VPS to access my docker network which runs all the services and then forward the traffic which goe through the reverse proxy (like shown in this picture).

​

Any Ideas if this is feasible and I’m open to other suggestions, I’m right now in the phase of solution finding, so everything is welcome, especcially when it comes with a tutorial.

​

Have a great day, Autchi

  • @certunaBEnglish
    0•7 months ago

    However, I’d prefere not to open ports at home

    But why? Opening one incoming port is not an issue if you only allow connections from the VPS in the firewall on that port. Keeping a 24/7 tunnel up is certainly possible, but it adds another layer of complexity/reliability.

    • @AutchirionOPBEnglish
      1•7 months ago

      Unfortunately my router doesn‘t allow filtering based on the origin IP. So I‘d have to set this up within every Docker container itself which I don‘t know how to do and I don’t know the implications of this.