Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • boonhet@lemm.ee
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    2 days ago

    Well it IS pretty nice to be able to tell people to go to jellyfin.example.com instead of example.com:8096, but you also get security benefits for using a properly set up reverse proxy. You don’t need to keep your ports open to the whole internet, only the reverse proxy accesses them. As far as the rest of the internet is concerned, you have :443 open.

    Edit: Forgot to add, Caddy and NPM and such can also automatically renew your certificates!