• 1 Post
  • 138 Comments
Joined 2 years ago
cake
Cake day: April 30th, 2024

help-circle














  • I have many services that doesn’t “need” to be public, as public facing for one specific reason. TLS.

    A lot of the times android apps won’t connect to http directions, not even local ones, and require a proper https connection with a well known CA.

    For that I put the services behind a caddy reverse proxy to get a valid tls certificate.

    And them I do the trick, and basically on caddy reject any connection that’s not local. Thus, making the supposedly “public” site a practical “local” one.

    Once there I just connect through wireguard.






  • I’m in the process of building a monitoring system with grafana stack.

    Right now I have monitoring panels for some common metrics and logs. I am yet to set up alerts.

    The idea being that if something goes wrong some metric will grow up unexpectedly, for instance network traffic. And I would get a notification.

    What I’m still considering is what would I consider abnormal behavior, so I could set up the thresholds.