Reverse proxy is not specifically for exposing a containerised service on internet, it also helps to enable SSL for all services via single reverse proxy on LAN.

If you want to expose a container based service just for yourself over internet, you can -

• If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].

• If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].

In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default you should set your firewall to block all incoming request from anywhere except LAN.

I’m personally using Cloudflared Tunnel, but planning to migrate to Tailscale.

[1] https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-ubuntu-20-04

[2] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/

[3] https://tailscale.com/

AdGuardHome is also self-hosted and does have this feature.

Actually in my cases, I have to block Facebook on all of my devices, but want to allow it for rest of my family members. So, I know its possible in AdGuardHome.

https://github.com/AdguardTeam/AdGuardHome

https://actualbudget.org/docs/config/reverse-proxies/

For which self-hosted app? Invidious?

Unless you are routing traffic through a VPN.

That’s correct. Thanks for the correction.

• AdguardHome/Pi-Hole (for DNS Filter)
• DrawIO (MS Visio equivalent)
• Invidious (Youtube privacy frontend)
• SearxNG (Google Privacy frontend)
• Vaultwarden (Self-hosted Bitwarden server)
• Miniflux (RSS Reader)
• linkWarden (Link aggregator)

Also, checkout https://selfh.st/apps/

“Requires to create an account” for what exactly? I’m a long term Ubuntu user without any Ubuntu one account.

Ubuntu Core, to be specific.

Ubuntu.

Why? - I guess I’m too lazy for distro hopping now :(

Besides, this was the 1st Linux distro I tried back in 2005. After the usual ditro hopping phase was over, I settled on it; somehow (irrespective of snap and other controversies) I feel at home.

It’s an open source product, in case you have concern about possibility of malicious code embedded within it.

At least there is no such indication so far from Mozilla :(

Why not Traefik as reverse proxy?

For gaming on Linux, use latest release (e.g. v575) of Nvidia driver. And for everything else stick to production release (e.g. v570).

If you have read the article, then this is more akin to switching from using two condoms to just one.

While that’s true, but the main issue here is the unavailability of frequent security patches that Fedora now appears to be attempting to solve with X11Libre.

Nonetheless, Roussel confirmed to TechRadar that there has been significant push-back from political parties and Swiss companies.

Signs of hope, I guess.

Proton client is open-source? yes.

Their server side code is independently audited? yes.

So, no issue in my Pov. But, “a company run by scientist” - that’s a bit stretching the truth, I would say.

Mozilla should make Fakepost source code open-source so that people (with right hardware) can self-host it.