I have read many posts in this subreddit and so many recommend using a domain (buying it) and then registering DNS.

Maybe I misunderstood because I’m new, but in theory isn’t it enough to use a DNS in lan like pihole, and then from the client browser using Wireguard simply write the domain defined on pihole? (Maybe even configuring nginx to have all the ports pointing to the correct services)

Am I wrong?

  • SillyLilBearBEnglish
    2·
    1 year ago

    SSL is the main reason, this way your traffic is encrypted from snoopers on your land, and you don’t get the warning messages about it not being secure.

    You can use a sub domain from desec for free to do this.

  • DesolateWolfBEnglish
    1·
    1 year ago

    Can’t get SSL certificates for an unregistered domain, my bitwarden instance is purely local (+VPN) but I still need SSL for it to work properly and I’m really not interested in managing my own CA and installing certificates on all my devices.