I want to make some services accessible from the ethernet, say my jellyfin instance or something, and some to be available locally only (traefik dashboard, proxmox).

Is there any way to make it so that all *.local.mydomain.com are only accessible from lan? I’m planning to give my local services a local.mydomain.com domain. (traefik.local.mydomain.com, pihole.local.mydomain.com)

  • primevaldark@alien.topBEnglish
    1·
    1 year ago

    Yes, you can configure a DNS server (or better - two) that serves as an authoritative server for local.mydomain.com and forwards everything to the global DNS servers (eg 8.8.8.8, 8.8.4.4 and 1.1.1.1). You have to use these DNS servers on your devices on a local network (manually or to configure DHCP server to advertise them). I did with BIND because this is what I know but other DNS servers will probably work too.

  • clintkev251@alien.topBEnglish
    1·
    1 year ago

    This is easy with Traefik. Just create one entrypoint for public services in addition to your existing entrypoint. Then point Cloudflare at your new entrypoint and add services that you intend to publicly expose to that entrypoint, then add everything else to the other entrypoint that isn’t connected to Cloudflared