• sudoMakeUser@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      10 hours ago

      Also interested how this works for mobile apps. I self host a number of services through caddy as my reverse proxy but each application is just dependent on it’s own authentication. If I exposed all my services to the internet, that’s a huge attack vector. If anyone else has some ideas I’d be happy to listen.

      • daniskarma@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        5 hours ago

        If you are the only user and don’t need to use those apps in devices you don’t own a vpn is the way to go.

        If not. Depending the number of users you could do some heavy ip geoblocking to at least reduce the exposed surface.

        There are a few services I have just like 3 IPs allowed to get a response from caddy, any other ip gets 403 error.