Can some explain what a reverse proxy is used for and why I should use one?  I googled it but still not 100% I understand it.

I wrote this up a little bit back.

 

https://www.linuxserver.io/index.php/overview-reverse-proxy-with-docker/

 

Should help. If not feel free to ask some follow up questions!

So its more a for convenience and ease of use then security?

So its more a for convenience and ease of use then security?

 

Security in the sense of you can just open up port 80/443.  Forward all traffic to 443. Setup one SSL cert and control all traffic that way.

So its more a for convenience and ease of use then security?

 

Security in the sense of you can just open up port 80/443.  Forward all traffic to 443. Setup one SSL cert and control all traffic that way.

To expand on that a little, only opening one port means that you only have one application to deal with for security concerns. As long as the proxy you use (nginx, apache, whatever) is updated and secure as it can be, you are done. If you open up ports directly to all your different stuff (sonar, sab, deluge, emby, whatever) then each open port is a possible security risk if the listening application has an unpatched known issue.

Thanks for that extra clarification jonothanm.

 

https://cipherli.st/ is a good site to look at for the proper way to secure your server once you have the SSL cert. I have updated those blog posts with that info as well.

Yeah I've got way more confidence in Apache's security than some of the apps I reverse proxy, no way would I consider opening most of them to the www.

I don't have any ports open for SAB, sonnar etc.  I can't access them from outside my network.  So a reverse proxy wouldn't do much for me correct?

I don't have any ports open for SAB, sonnar etc.  I can't access them from outside my network.  So a reverse proxy wouldn't do much for me correct?

 

Correct. At that point it would be the ease of IPADDRESS/service vs IPADDRESS:PORT

I don't have any ports open for SAB, sonnar etc.  I can't access them from outside my network.  So a reverse proxy wouldn't do much for me correct?

 

I disagree a reverse proxy would enable you to access these apps from outside your LAN.

 

There are afaik three ways to access apps outside of your LAN

• VPN - Undoubtedly the most secure but requires software installation on client
  
• Reverse Proxy
  
• Port Opening
  

 

If you're not interested in accessing stuff outside your LAN then I agree with smdion that there is no point in a reverse proxy, however if you do wish to access stuff outside your LAN then a reverse proxy would be a good way.

 

Only caveat is never, ever, never map your Unraid webui to the reverse proxy.  That should remain available only on VPN imho.

I don't have any ports open for SAB, sonnar etc.  I can't access them from outside my network.  So a reverse proxy wouldn't do much for me correct?

 

I disagree a reverse proxy would enable you to access these apps from outside your LAN.

 

There are afaik three ways to access apps outside of your LAN

• VPN - Undoubtedly the most secure but requires software installation on client
  
• Reverse Proxy
  
• Port Opening
  

 

If you're not interested in accessing stuff outside your LAN then I agree with smdion that there is no point in a reverse proxy, however if you do wish to access stuff outside your LAN then a reverse proxy would be a good way.

 

Only caveat is never, ever, never map your Unraid webui to the reverse proxy.  That should remain available only on VPN imho.

 

Yes... my assumption was he doesn't want to access it from the outside world

Correct smidion, thanks guys