macmini-server/README.md

Cloud Server Docker Contianers

Device -- 2012 Mac Mini

Information

This Mac Mini acts as my network gateway and DNS, it additionally hosts my Gitea for right now

Contents:

~/Docker
├── adguard/
├── cloudflared/
├── gitea/
├── glances/
├── nginx/
├── portainer/
└── README.md

Current Ports:

• 53 --> adgaurd DNS
• 81 --> nginx proxy manager web ui
• 2222 --> gitea ssh
• 3000 --> adguard web UI
• 3001 --> gitea web ui
• 8000 --> portainer
• 9443 --> portainer web ui
• 61208 --> glances web ui

Current Web Paths:

• szumko.net --> Home Assistant
• git.szumko.net --> Gitea
• cloud.szumko.net --> nextcloud

Adding Subdomains:

1. Go to cloudflare account and add a dns record for the subdomain
2. Go to ~/docker/cloudflared/config.yml and add the ingress pointing to NPM
3. Create a proxy host in NPM pointing to container_name:port (must be on homelab internal network)

Adding Paths:

1. Add path in NPM (must be on homelab)

UFW Settings

Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW IN    192.168.0.0/24            # LAN ssh
22/tcp on tailscale0       ALLOW IN    Anywhere                  # Tailscle ssh
53,80,81,443,61208/tcp     ALLOW IN    192.168.0.0/24            # LAN Access, 53 -> Adguard, 61208 -> glances
53,80,81,443,61208/udp     ALLOW IN    192.168.0.0/24            # LAN Access, 53 -> Adguard, 61208 -> glances
53,80,81,443,61208/tcp on tailscale0 ALLOW IN    Anywhere        # Tailscale Access, 53 -> Adguard, 61208 -> glances
53,80,81,443,61208/udp on tailscale0 ALLOW IN    Anywhere        # Tailscale Access, 53 -> Adguard, 61208 -> glances
22/tcp (v6) on tailscale0  ALLOW IN    Anywhere (v6)             # Tailscale ssh (IPv6)
53,80,81,443,61208/tcp (v6) on tailscale0 ALLOW IN    Anywhere (v6)         # Tailscale Access (IPv6), 53 -> Adguard, 61208 -> glances
53,80,81,443,61208/udp (v6) on tailscale0 ALLOW IN    Anywhere (v6) 	    # Tailscale Access (IPv6), 53 -> Adguard, 61208 -> glances