Putting Raspberry Pi Online with Caddy and SSH Tunnel

Post by anderspitman » Mon, Oct 26, 2020, 8:15 PM UTC

mercora wrote: post #27

iamd3vil wrote: post #2

I think a better option would be to create a Wireguard tunnel between Raspberry Pi and the remote server instead of a SSH Tunnel. Then there is no need to add or change ports and restart the tunnel for every service.

while i think this is true (any other vpn software would work too though) i want to point out that you actually can bring up a tun interface using ssh with the "-w local_tun[:remote_tun]" flag somewhat easily if you want to. It is also possible to make forwarding work in either direction using an integrated socks proxy using "-R" or "-D" flags ...

Post by anderspitman » Mon, Oct 26, 2020, 8:23 PM UTC

dominicl wrote: post #35

One can also use the Diode P2P network to get the same without a server: https://support.diode.io/article/ss32engxlq works for ssh remote access, websites and stuff similar to ngrok just without the strings attached.

Post by anderspitman » Mon, Oct 26, 2020, 8:25 PM UTC

jeromenerf wrote: post #6

> I disabled nginx on the server and installed Caddy instead. I wonder how a somehow simpler config syntax (Caddyfile) compares to a simpler maintenance system (apt).

Post by anderspitman » Mon, Oct 26, 2020, 8:27 PM UTC

megous wrote: post #38

rmoriz wrote: post #13

Earlier quoted context omitted.

Caddy underwent a complete rewrite that also invalidated most of the existing config. Personally I don't see any benefits in using caddy or another non mainstream httpd as it adds more risk to my project with usually very little benefits. Nothing against using it for hobby projects but in production I've migrated back to nginx.

I had an itch to look at Caddy, after reading the comments, but breaking configuration backwards compatibility is a huge turn off.

Post by viraptor » Mon, Oct 26, 2020, 8:38 PM UTC

anderspitman wrote: post #115

viraptor wrote: post #61

Earlier quoted context omitted.

As an alternative, you could put it on a public mesh VPN. I use ZeroTier for that so I don't have to host an explicit beacon.

Does ZeroTier let you expose a specific machine publicly? ie if I have a raspberry pi behind a NAT, will ZeroTier provide me with a public IP anyone can use to connect to it?