EliteCow

joined 2 years ago
[–] EliteCow 1 points 2 years ago

Thank you for all of this info. 443 is now my only open port and directs to my Caddy server. For extra security, I'm going to look into implementing an authentication portal for each backend service that is not "public" for all.

[–] EliteCow 1 points 2 years ago (2 children)

Thank you! Just to clarify - I should only forward 443 & 80 for Caddy. Then in the Caddy config define the ports within the reverse proxy. Is that correct?

How safe/secure is it to host a public website or services like a Lemmy instance doing this?

For services I don't care to be available outside of my network, I am not adding to Caddy and accessing them directly via internal IP.

[–] EliteCow 2 points 2 years ago

Thanks for the heads-up on terminology! What you mentioned is how I set it up.

I had no idea that the ports could be configured like that! This is very helpful. Docker is a beast to get used to!

[–] EliteCow 11 points 2 years ago (8 children)

Thank you! I am using Caddy and was able to define a unique random port for the other containers and access this via reverse proxy!

[–] EliteCow 6 points 2 years ago* (last edited 2 years ago) (2 children)

I have done what you mentioned and used a random port internally and kept 443 as the listening port. I am using Caddy to then direct the traffic reverse proxy it.

Thank you so much!

[–] EliteCow 4 points 2 years ago (5 children)

Thanks a ton! I did not realize you could have a different listing port vs internally used port.

I have done what you mentioned and used a random port internally and kept 443 as the listening port. I am using Caddy to then direct the traffic reverse proxy it.

Thanks again!

[–] EliteCow 3 points 2 years ago* (last edited 2 years ago) (1 children)

Yes! Plex_Debrid is the automation component that will go and add the torrents to RealDebrid based on your Watchlist in Plex. The Plex_Debrid Github has a step by step guide on setting each component up.

[–] EliteCow 2 points 2 years ago

It downloads the torrent and then streams from the service. That way your traffic is clean.

[–] EliteCow 4 points 2 years ago* (last edited 2 years ago) (1 children)

~~Yep!~~

Correction. I guess it is a bit different than a seedbox (I've never used a seedbox)

Here is what I found online:

  • A Debrid service has support for multiple premium file hosts, while a Seedbox does not
  • A Debrid service, once it completes a torrent download, will stop seeding, while a Seedbox seeds a download forever until you stop it from seeding (hence the name).
  • Some Debrid services, such as Premiumize, can seed for a certain amount of time.
  • A Debrid service is usually cheaper than a Seedbox.

RealDebrid not only allows you to download but also stream directly from them. I use rclone to mount the drive to my media server and read the files with Plex/Jellyfin.

[–] EliteCow 1 points 2 years ago

That's a great question. I believe it does based off the GUi info.

[–] EliteCow 33 points 2 years ago* (last edited 2 years ago) (13 children)

I recently cancelled all streaming services I had.

I now use Plex / Jellyfin with Plex_Debrid & RealDebrid.

[–] EliteCow 1 points 2 years ago

Why are you posting a link to a reddit community?

view more: ‹ prev next ›