Cloud Server Docker Contianers

Device -- 2012 Mac Mini

Information

This Mac Mini acts as my network gateway and DNS, it additionally hosts my Gitea for right now

Contents:

~/Docker
├── adguard/
├── cloudflared/
├── gitea/
├── glances/
├── nginx/
├── portainer/
└── README.md

Current Ports:

• 53 --> adgaurd DNS
• 81 --> nginx proxy manager web ui
• 2222 --> gitea ssh
• 3000 --> adguard web UI
• 3001 --> gitea web ui
• 8000 --> portainer
• 9443 --> portainer web ui
• 61208 --> glances web ui

Current Web Paths:

• szumko.net --> Home Assistant
• git.szumko.net --> Gitea
• cloud.szumko.net --> nextcloud

Adding Subdomains:

1. Go to cloudflare account and add a dns record for the subdomain
2. Go to ~/docker/cloudflared/config.yml and add the ingress pointing to NPM
3. Create a proxy host in NPM pointing to container_name:port (must be on homelab internal network)

Adding Paths:

1. Add path in NPM (must be on homelab)

UFW Settings

Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22                         ALLOW IN    192.168.0.0/24             # LAN SSH
22 on tailscale0           ALLOW IN    Anywhere                   # Tailscale SSH
Anywhere                   ALLOW IN    192.168.0.0/24             # LAN General Access
81 on tailscale0           ALLOW IN    Anywhere                   # Tailscale NPM
53 on tailscale0           ALLOW IN    Anywhere                   # Tailscale DNS
3000 on tailscale0         ALLOW IN    Anywhere                   # Tailscale AGH
3001 on tailscale0         ALLOW IN    Anywhere                   # Tailscale Gitea
2222 on tailscale0         ALLOW IN    Anywhere                   # Tailscale Gitea
9443 on tailscale0         ALLOW IN    Anywhere                   # Tailscale Portainer
61208 on tailscale0        ALLOW IN    Anywhere                   # Tailscale Glances
22 (v6) on tailscale0      ALLOW IN    Anywhere (v6)              # Tailscale SSH
81 (v6) on tailscale0      ALLOW IN    Anywhere (v6)              # Tailscale NPM
53 (v6) on tailscale0      ALLOW IN    Anywhere (v6)              # Tailscale DNS
3000 (v6) on tailscale0    ALLOW IN    Anywhere (v6)              # Tailscale AGH
3001 (v6) on tailscale0    ALLOW IN    Anywhere (v6)              # Tailscale Gitea
2222 (v6) on tailscale0    ALLOW IN    Anywhere (v6)              # Tailscale Gitea
9443 (v6) on tailscale0    ALLOW IN    Anywhere (v6)              # Tailscale Portainer
61208 (v6) on tailscale0   ALLOW IN    Anywhere (v6)              # Tailscale Glances