Hey all,

 

I've had an unraid server running for a year now and it's been brilliant! I mostly use it as a media server now (which is funny as that wasn't one of my original goals) but also for the odd game server, password manager and other really useful things.

 

Until now, I ran everything in containers all within a single shared custom network and used a domain managed by cloudflare to point to my router, which port forwarded to NGINX so I had pretty much everything accessible with a simple subdomain.

 

Lately I've decided that's probably not the most secure way of doings things so I'm trying to tidy things up a bit.

 

Cloudflare Tunnel

I use this for a couple of containers that I want to expose to the web without the requirement of a VPN to connect. This works really nicely outside of my network though for some reason it doesn't work from within my local network? Is this normal? Or have I missed something during configuration?

 

Tailscale

I upgraded to Unraid 7 and set up tailscale. This on its own works great! I can connect to my server via my tailscale ip from anywhere and use port numbers to navigate my various containers.

 

The biggest issue with this for me though is that I can't remember the IPs and Ports of everything I want to connect to..

 

NGINX Proxy Manager

I was using this previously to re-route subdomains to services and it worked brilliantly. I'd like to continue using it but only within the enclosed safety of my local network / VPN. I'm struggling to work out how to set this up without port forwarding since it uses 80 and 443 by default but so does the Unraid GUI. My Unraid is on 10.10.10.2 and my original plan was to put NPM on 10.10.10.3 and somehow point traffic to that.. however, Unraid still complains about the ports already being in use.

 

How do others have this set up? What sort of docker network should NPM be on?

 

I think I can potentially install tailscale into NPM (once I get NPM working) and then point traffic directly to the tailscale NPM IP from cloudflare DNS, however.. I also ideally want subdomains to work within my own local network when not connected via VPN. I might be wrong, but I feel like I shouldn't "need" to own a domain to be able to make this work. I presumably need to point my router to NPM? But I can't give it a port.. so I need to find a way to get 80 and 443 working? Which is where I thought if I could set it up on 10.10.10.3 then I could just router DNS to NPM then it should work? but it's not.

 

Overall I think I know what I want to do. But I'm not at export on networks so I'm having a bit of trouble getting it set up. I don't really understand the difference between the types of docker network either. From what I understand, if you want containers to talk to each other then they should be on the same network. So i have a single customer network that pretty much everything is sharing. But I don't really know if i should be using host, bridge of br0 instead?

 

Any help would be appreciated!

 

Thanks!

Stuart

4 hours ago, S7ewie said:

The biggest issue with this for me though is that I can't remember the IPs and Ports of everything I want to connect to..

🙃 Use a pencil and paper!      😅   😂  🤣