spoons.technology/core-infra
Watch
4
0
Fork
You've already forked core-infra
 1
Code Issues 8 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Some pattern for fronting home-hosted service #45

New issue
Open
opened 2026-02-12 19:39:38 +00:00 by tom · 4 comments
tom commented 2026-02-12 19:39:38 +00:00
Owner
Copy link

This could also be applied to things outside upcloud, but it's mostly for "home" stuff.

Goals:

  • Do at least "initial" auth in core (#42)
  • Have a path to tunneled connections to avoid (CG)NAT issues etc.
  • Have a path to caching (small, dumb varnish perhaps?)
  • Some kind of protection for home-hosted services (maybe a simple magic header would work?)
    • Would be good to avoid IP allowlists, because suck
This could also be applied to things outside upcloud, but it's mostly for "home" stuff. Goals: * Do at least "initial" auth in core (#42) * Have a path to tunneled connections to avoid (CG)NAT issues etc. * Have a path to caching (small, dumb varnish perhaps?) * Some kind of protection for home-hosted services (maybe a simple magic header would work?) * Would be good to avoid IP allowlists, because suck
tom commented 2026-02-12 20:12:26 +00:00
Author
Owner
Copy link

Follow-up: can/should there be an easy way to have you local service go direct, perhaps via DNS overrides and some kind of hacks for certs?

Follow-up: can/should there be an easy way to have you local service go direct, perhaps via DNS overrides and some kind of hacks for certs?
tom commented 2026-03-09 14:31:04 +00:00
Author
Owner
Copy link

Some of this is done: simple-auth + magic header thing. Still need some sort of tunnel

Some of this is done: simple-auth + magic header thing. Still need some sort of tunnel
tom commented 2026-04-22 12:22:47 +01:00
Author
Owner
Copy link

https://github.com/rathole-org/rathole looks promising.

https://github.com/rathole-org/rathole looks promising.
tom commented 2026-07-29 12:52:23 +01:00
Author
Owner
Copy link

https://pangolin.net also looks promising, with the possible downside of staggering complexity.

https://pangolin.net also looks promising, with the possible downside of staggering complexity.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
configure-incus-remotes
upcloud-lb-tf
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
spoons.technology/core-infra#45
No description provided.