Aurora2024

Thank you for the comprehensive description. I have done some own research for this, and I think it will be a good solution to use Pangolin project on the VPS-Server. Easy management and all-in-one proxy & security solution. Should I use the wireguard client on Unraid or on the opnsense firewall connected in front of it? Both are able to use wireguard. You write that Authelia can be installed both on the VPS and on Unraid. How is the database synchronized? It makes no sense if Outline is connected to the local Authelia, while the proxy on the VPS uses the other Authelia instance. I want that the home server is working air-gapped, too. If the internet connection fails, I want to be able to continue using all apps locally. So I think a unraid instance of authelia and a second Reverse Proxy on the internal box is the right solution.

Hello, I need an overview of the options that are available today for making self-hosted apps securely available externally via my own domain. My plan (maybe incomplete) looks something like this: - Booking a small VPS linux server in the internet with fixed IPv4 address - Building a VPN between opnsense or via unraid in my private network with the VPS server. (I have CGNAT so no external port forwarding possible) - In the DNS matching my domain and all subdomains *.mydomain.tld to the IP of the VPS. - Using authelia as a Single Sign On Provider framework for authenticate at the reverse proxy and user management for the Apps that runs on unraid - Maybe using of Crowdsec for attack protection - Firewall with Geoblocking (only germany should be allowed, maybe other countries too) - Some apps I want to make available on the internet, Outline, Home Assistant, Nextcloud, etc. - Should then be accessible via home.mydomain.tld, cloud.mydomain.tld, wiki.mydomain.tld What exactly do I need for this, and where do I need to install it? - Which tools are installed on the VPS server? Or is the VPN client and port forwarding to the reverse proxy running as an app on Unraid sufficient? - Or does the reverse proxy have to be installed on the VPS? Then the installation under e.g. Debian Linux has to be done manually, because there is no Unraid running. - Or can I get the VPS management into an Unraid GUI? - Or can I install the Proxy as App on Unraid? So I could using split dns resolving for internal usage, so accessing the services internally, the external VPS server is not used. - Which VPN should I use here? Wireguard? IPsec? - Which apps do I need in total and where do they have to be installed? First, I would start with the “outline” service as a wiki to make it available externally as the first project and connect this app to a central authentication service. Can anyone give me a manual where this has already been described? It can also be the most modern technology possible. Thank you for your suggestions and help.