HI all

 

I whould like to connect to Immich and Home assitant from WAN.

 

But i will have it secure and there is a TON guides about this. But what is the best/most secure way?

 

I allready have a domain and cloudflare account.

 

But immich dosent have 2FA.

 

What can you recommend? Meaby a good guide?

 

Thanks!

 

Regards Daniel

SWAG docker.

 

Immich supports SSO (sign in with google, etc...) but you can always throw something like Authentik or Authelia in front of it.

 

Alternatively, you can use Tailscale to access it instead of open to the wider internet.

Edited April 15, 20251 yr by MowMdown

6 minutes ago, MowMdown said:

SWAG docker.

 

Immich supports SSO (sign in with google, etc...) but you can always throw something like Authentik or Authelia in front of it.

 

Alternatively, you can use Tailscale to access it instead of open to the wider internet.

Hi

 

Thanks!

But why SWAG? Is Nginx not better? 

 

I allready have wireguard on Unify but my wife cant connect to VPN it is a little to techy

3 minutes ago, DanielPT said:

Hi

 

Thanks!

But why SWAG? Is Nginx not better? 

 

I allready have wireguard on Unify but my wife cant connect to VPN it is a little to techy

 

SWAG = Let's Encrypt + NGINX + Fail2Ban and more. Much more useful than just NGINX by itself. Plus it has things like "Auto Proxy" which can detect dockers you have running and pre-configure them for reverse proxying.

 

Tailscale makes things easy for non-techy people. (just an FYI if you change your mind later)

Edited April 15, 20251 yr by MowMdown

1 minute ago, MowMdown said:

 

SWAG = Let's Encrypt + NGINX + Fail2Ban and more. Much more useful than just NGINX by itself. Plus it has things like "Auto Proxy" which can detect dockers you have running and pre-configure them for reverse proxying.

 

Tailscale makes things easy for non-techy people. (just an FYI if you change your mind later)

Wow cool! So i could also use SWAG for my minecraft server? Do you have a guide for SWAG?  

 

 

Probably find what you need searching though this

 

Plenty of resources on Youtube as well, such as "Spaceinvaderone" and "ibracorp"

 

Most of SWAGs proxy-confs are pre-created so all you have to do is remove the ".sample" from the file. If the swag container and other containers are in the same docker network, you may have to change the hostname from the docker name to your unraid IP in the config file.

 

https://www.linuxserver.io/blog/securing-swag

Edited April 15, 20251 yr by MowMdown

4 hours ago, MowMdown said:

 

Probably find what you need searching though this

 

Plenty of resources on Youtube as well, such as "Spaceinvaderone" and "ibracorp"

 

Most of SWAGs proxy-confs are pre-created so all you have to do is remove the ".sample" from the file. If the swag container and other containers are in the same docker network, you may have to change the hostname from the docker name to your unraid IP in the config file.

 

https://www.linuxserver.io/blog/securing-swag

 

But what if i dont use linuxserver dockers?

The imagine maintainer is irrelevant. SWAG isn't limited to working only with other linuxserver containers.

 

Unless you have a moral issue with linuxserver in general, I don't see why it matters who's containers you use.

 

 

11 hours ago, MowMdown said:

The imagine maintainer is irrelevant. SWAG isn't limited to working only with other linuxserver containers.

 

Unless you have a moral issue with linuxserver in general, I don't see why it matters who's containers you use.

 

 

Ouh sorry i mixed around  I saw the video from spaceinvader that Tailscale needed a linuxserver container
Meaby the most secure way is tailscale. Hmm.