HAProxy-WI: Run Lots Of Public Services On Your Home Server

**********************************
Thanks for watching our videos! If you want more, check us out online at the following places:


-----------------------------------------------------------------------------------------------------------
Licensed under Creative Commons: By Attribution 3.0 License

[antaishizuku]

I'd love to see you do a collaboration with Lawrence systems.

[roxy-wi]

Nice video, thank you!

Couple little remarks: HAProxy-WI doesn't take all stuff from SSH. Main part information provides from sockets. Also GUI can install haproxy, nginx and keepalived and configures your hosts, so you don't need install them by manually

[xryz]

OMG I was literally wanting to do this and was research. Was going to make a forum post asking about software.

[paulwratt]

thanx for this, I had just started investigating what I could use to set up this exact same senario for 2x seperate private networks, both on RPi's - the fact that it has already been prototyped for two seperate users/networks, AND documented, has already taken a load off my mind, especially the securty aspect of it all - cheers, and thanx again

[JoaoSilva-gsjb]

so much gold being spilled for free man, thanks uncle Wendel, you make us better IT Masters

[brianmccullough]

Man Wendell, no wonder your Linux videos take awhile! That was a work of art! Its like if Leonardo DaVinci was a computer janitor/plumber. Keep it up! Im definitely gonna try this

[kurtpeterson]

I have been looking for some of these answers for almost as long as your video has been posted... Thank you!

[TerenceKearns]

Dude this is ace. I can’t believe I haven’t done IT in like 20years but I understood everything you just explained.

Last time I did this was at uni of Canberra in 2003 using Apache as a reverse proxy facing the internet and everything else was behind it. I was actually employed as a web dev and when I rocked up I was like “hey reverse proxy” and they (systems) were like “oh fuck, why didn’t we think of that” lol.

[Simon]

This is pretty neat. I've done a similar thing for email, except rather than using a proxy, using postfix to forward via SMTP to my home server.
This way I get more control over the email protocol, and messages can queue up for days rather than hours if there is a network issue.

[geogmz]

When Wendell comes out with a Linux video I don't even need a notification my Nerdy Sense just tingles.. 😏

By the way check Nginx Proxy Manager stupid simple to use with Docker.

[michaelpelley]

Damn - just noticed the Digital Unix box in the background. Used to have that in miy office. Looonnnnggg time since I saw that!

[MartinPaoloni]

I was trying to do something like this yesterday! I'll revisit this video during the weekend. Thanks Wendell!

[sanjacobs]

Thanks for making this video, Wendell! You're a legend, extremely interesting stuff! <3

[MikeBohde]

I've been thinking of hosting my own email for a while this is certainly a good starting spot.

[mjarkk]

Great video, for a company i created a drag and drop GUI tool to create ha configs that could be directly deployed to proxy servers.

[gardiner_bryant]

If I wanted to forward client headers through the proxy to the backend, how would I do that with HA Proxy? I'm using OPNSense rather than PFSense because PF doesn't support the NICs in my hardware.

[Crazytje]

Been running like this for years, but imo in a easier way.

Could be more secure and easy to set up if between the VPS and your home connection you use a VPN, then use SSL termination on the haproxy before forwarding.
This makes things easy to manage imo, the cert used is in 1 location and the haproxy config is pretty simple.

In my case there is a VM with docker containers that serve anything from web to tftp, pxe servers and more on the LAN.

For the VPN, you can use pfsense or in your NAS

Additionally for the letsencrypt cert, when using pfsense the renewal can be handled for that by it.
A tip for this, add a post script to put the cert on your NAS. That location can then be mounted on your VPS due to having the VPN, run an automatic reload script when the cert changes. This way there is 0 down time and no intervention needed.

[JzJad]

The amount of ACLs on my pfsense box is getting insane for haproxy, that coupled with the dynamic dns service is wonderful.

[mjbates]

This is very similar to what Helm is doing, but they are selling a complete solution for ~$500.

[Maxjoker]

I used to do something similar with SSH to make a webserver on my notebook/phone available(behind an authenticating proxy) via my VPS.
Also that security by obscurity thing. I used to host a small website at home. But traffic was getting annoying. My solution? Drop ICMP pings at my router. My website was still available, but almost all scanners ping'ed before trying HTTP.