• sudoMakeUser@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 hours ago

    Also interested how this works for mobile apps. I self host a number of services through caddy as my reverse proxy but each application is just dependent on it’s own authentication. If I exposed all my services to the internet, that’s a huge attack vector. If anyone else has some ideas I’d be happy to listen.

    • daniskarma@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      44 minutes ago

      If you are the only user and don’t need to use those apps in devices you don’t own a vpn is the way to go.

      If not. Depending the number of users you could do some heavy ip geoblocking to at least reduce the exposed surface.

      There are a few services I have just like 3 IPs allowed to get a response from caddy, any other ip gets 403 error.