Restrict ‘locale’ services to local network #17

New issue

Open

opened 2023-01-17 19:24:15 +01:00 by tdpeuter · 2 comments

tdpeuter commented

2023-01-17 19:24:15 +01:00

Owner

At the moment it is still possible to reach local applications such as Prowlarr, qBittorrent, Traefik by writing extra DNS entries. Services are still password protected but this should not be possible.

Change to whitelist.

Traefik has a sourceRange in Middleware?

tdpeuter added the

bug

label 2023-01-17 19:24:15 +01:00

tdpeuter added this to the Server setup project 2023-01-17 19:24:16 +01:00

tdpeuter added a new dependency 2023-09-17 22:10:30 +02:00

#18 Flexible homepage

tdpeuter commented

2023-09-17 22:11:09 +02:00

Author

Owner

At one point, I would like to be running a SSO like for example Authelia.

At one point, I would like to be running a SSO like for example [Authelia](https://www.authelia.com/).

tdpeuter commented

2023-10-07 22:36:20 +02:00

Author

Owner

I will be creating a list of services and differentiate between local/public:

Public (someone should be allowed to check it out):

Local (it should be inaccessible from outside the network):

*arr
qBittorrent
Calibre

I will be creating a list of services and differentiate between local/public: Public (someone should be allowed to check it out): - [Gitea](https://git.depeuter.dev) - [Nextcloud](https://cloud.depeuter.dev) - [Plex](https://plex.depeuter.dev) - [Jellyfin](https://jelly.depeuter.dev) - [Vaultwarden](https://vault.depeuter.dev) - [Calibre-web](https://books.depeuter.dev) - [FreshRSS](https://rss.depeuter.dev) - [Immich](https://immich.depeuter.dev) Local (it should be inaccessible from outside the network): - *arr - qBittorrent - Calibre

tdpeuter removed a dependency 2023-11-05 16:25:01 +01:00

#18 Flexible homepage