Selfhosted

60542 readers

580 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the link in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post. )

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

How to get local SSL and use your public domain for local internal subdomains? (lemmy.dbzer0.com)

submitted 2 years ago by ComradeMiao@lemmy.dbzer0.com to c/selfhosted@lemmy.world

30 comments fedilink hide all child comments

For instance how can I use my *.domain.com SSL certs and NPM to route containers to a subdomain without exposing them? The main domain is exposed.

you are viewing a single comment's thread
view the rest of the comments

[–] ag10n@lemmy.world 6 points 2 years ago (1 children)

https://www.freecodecamp.org/news/docker-nginx-letsencrypt-easy-secure-reverse-proxy-40165ba3aee2/

[–] wildbus8979@sh.itjust.works 1 points 2 years ago (2 children)

OP is asking for cases where you don't want to allow the service (or reverse proxy) to be accessible via the web.

[–] NeoNachtwaechter@lemmy.world 2 points 2 years ago

As I understand it, OP just wants to hide (=remove) the subdomains from the public URLs.

[–] ag10n@lemmy.world 1 points 2 years ago (1 children)

public domain for internal services

I guess they need a CA then

https://smallstep.com/docs/step-ca/

[–] wildbus8979@sh.itjust.works 0 points 2 years ago (1 children)

They do not. See my other reply about DNS verification.

[–] ag10n@lemmy.world 2 points 2 years ago* (last edited 2 years ago) (1 children)

Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

[–] wildbus8979@sh.itjust.works 1 points 2 years ago

Fair, I don't know why I read OPs post as asking for let's encrypt certs. Internal CA is indeed an option.