cloud-server/README.md

Cloud Server Docker Contianers

Device -- Raspberry Pi 4

Information

This folder contains all of the services running on the Pi

Contents:

~/Docker
├── cloudflared/
├── dashy/
├── glances/
├── homarr/
├── nextcloud/
├── nginx/
├── portainer/
├── README.md
└── syncthing/

Current Ports:

• 81 --> nginx proxy manager web ui
• 2222 --> gitea ssh
• 3000 --> gitea web ui
• 7575 --> homarr
• 8000 --> portainer
• 8080 --> nextcloud web ui
• 8123 --> home assistant web ui
• 8181 --> dashy
• 8282 --> ha bridge web ui
• 8384 --> syncthing web ui
• 9443 --> portainer web ui
• 22000 --> synthing
• 50000 --> ha bridge
• 61208 --> glances web ui

Current Web Paths:

• szumko.net --> Home Assistant
• szumko.net/data --> glances *Currently Disabled
• pihole.szumko.net --> Pihole
• git.szumko.net --> Gitea
• cloud.szumko.net --> nextcloud

Adding Subdomains:

1. Go to cloudflare account and add a dns record for the subdomain
2. Go to ~/docker/cloudflared/config.yml and add the ingress pointing to NPM
3. Create a proxy host in NPM pointing to container_name:port (must be on homelab internal network)

Adding Paths:

1. Add path in NPM (must be on homelab)

UFW Settings

Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW IN    192.168.0.0/24            # LAN ssh
22/tcp on tailscale0       ALLOW IN    Anywhere                  # Tailscle ssh
53,80,81,443,61208/tcp     ALLOW IN    192.168.0.0/24            # LAN Access, 53 -> Pihole, 61208 -> glances
53,80,81,443,61208/udp     ALLOW IN    192.168.0.0/24            # LAN Access, 53 -> Pihole, 61208 -> glances
53,80,81,443,61208/tcp on tailscale0 ALLOW IN    Anywhere        # Tailscale Access, 53 -> Pihole, 61208 -> glances
53,80,81,443,61208/udp on tailscale0 ALLOW IN    Anywhere        # Tailscale Access, 53 -> Pihole, 61208 -> glances
80/tcp                     ALLOW IN    172.16.0.0/12             # Docker networks (for calling pihole from NPM)
22/tcp (v6) on tailscale0  ALLOW IN    Anywhere (v6)             # Tailscale ssh (IPv6)
53,80,81,443,61208/tcp (v6) on tailscale0 ALLOW IN    Anywhere (v6)         # Tailscale Access (IPv6), 53 -> Pihole, 61208 -> glances
53,80,81,443,61208/udp (v6) on tailscale0 ALLOW IN    Anywhere (v6) 	    # Tailscale Access (IPv6), 53 -> Pihole, 61208 -> glances