I have a minipc with proxmox on it. I have tried caddy in a lxc to set up DNS challenges to my owned domain and I set the url in my router to point to the IP (for example, proxmox.DOMAIN.com could be 192.168.10.22). The hope was to have everything local within my house and nothing needs the internet to be accessed. Some services I can host in proxmox NEED https to use, which I could not get working with my own certs or ones proxmox could make, thus Caddy. However, I get proxmox with a proper cert, but i cannot get any of the other services from proxmox working. If I were doing it all manually, I would expect DNS issues with the domain, but from what I understand, Caddy by default does wildcard domains which should mean that my services should work. but they do not. Networking is new to me so perhaps I am missing something obvious. Any guidance would be appreciated.

  • CompactFlax@discuss.tchncs.deEnglish
    1·
    3 小时前

    Firstly, wildcards are convenient but they break your functionality of authenticating the server to which you are connecting which is half of what TLS does. That may or may not be important to you.

    Does it work without TLS? Start there, making sure dns and reverse proxy works, works, then add the certificate/TLS termination.

    • ShortN0te@lemmy.mlEnglish
      3·
      3 小时前

      Its good practice to handle https on a reverse proxy. Also who actually does cert pinning?

        • ShortN0te@lemmy.mlEnglish
          3·
          3 小时前

          Firstly, wildcards are convenient but they break your functionality of to which you are connecting which is half of what TLS does. That may or may not be important to you.

          You are implying that https is supposed to be done by the individual server and not reverse proxy. Since otherwise you could not “authenticating the server”