I’m currently using NPM and upgrading to a new VPS for my business. I have a public website and am going to host a few more for friends, plus a few other services. Everything is on docker for ease. I use Cloudflare for DNS so would prefer using a DNS challenge. I will change this at some point but not yet ready to!

Should I:

  1. stick with Nginx Proxy Manager which I know well (is it really that insecure or outdated?)
  2. switch to NPM Plus (assuming this is the easiest)
  3. switch to Caddy (seems to be there most recommended but will be a learning curve for me)
  4. Try out Nginx (seems like a massive learning curve so I’m very reluctant)
  • irmadlad@lemmy.worldEnglish
    4·
    3 days ago

    I use Cloudflare for DNS so would prefer using a DNS challenge. I will change this at some point but not yet ready to!

    Since you are already using Cloudflare, and you are moving to an upgraded VPS, why not incorporate Cloudflare’s Tunnel/ZeroTrust? The nice thing about their ZeroTrust Tunnel is that you don’t have to punch holes in your UFW firewall, no port forwarding or NAT on your external firewall/router. It’s just one tunnel that handles your traffic, and Cloudflare takes care of the certs.There is a section that allows you to implement the DNS challenge/verification. You seem experienced so it’s fairly easy to deploy. The caveat is that you have to have a proper domain name, and use the issued Cloudflare nameservers. I picked up a domain name at NamesCheap for $1.75 USD.

    • brewery@feddit.ukOPEnglish
      2·
      1 day ago

      Thanks for this. To be honest it just did not cross my mind! Horserace, I am not sure I want to rely on Cloudflare too much though in case they so something in the future like put those things behind paywalls. My domains are through someone else so can easily switch nameservers to them for DNS. It does sound much easier and safer though so will have to consider it

      • irmadlad@lemmy.worldEnglish
        2·
        24 hours ago

        I am not sure I want to rely on Cloudflare too much

        Totally understandable. It’s good to be aware of future pitfalls, etc. I realize there are those who frown on Cloudflare, and I can see their point. For me, I’ll use them for the time being, and monitor any policy changes, or future gotchas. Of course, it goes without saying, that we should be doing that anyways even for opensource software. Things change, motivations change, project direction changes.

        There are similar alternatives to Cloudflare Tunnels/ZeroTrust. I have not tried every one of them so I cannot vouch for their usability. There is ngrok, which seems to be the most popular of the alternatives, and there is Pagekite, Zrok, Pinggy, Localtunnel. As far as selfhosted options, Nebula, SirTunnel, BoringProxy, Pangolin, and frp come to mind.

        If it were me, and these were public facing businesses, I would go with something rock solid like Cloudflare, familiarize myself with the options, then monitor for policy changes.