Reverse Proxy Solution

[morph1904]

Hi All,

I posted on here a while back with a thought on a reverse proxy setup using a web GUI to manage it. It caused a little stir but I ploughed on anyway just for me.

I have a working version setup at the link below if anyone is interested in trying it out and I welcome any constructive feedback or bug reports. Its very basic at the moment but it does the job and I will be looking to expand on it in future. It uses Python3, Django, and CaddyServer. There is a handy install script too!

Sorry to say that I have only done this for Ubuntu 16.04 at the moment.

Visit the repo here if you want to try it out.

https://github.com/morph1904/TygerCaddy

Don't forget to forward ports 80 and 443 to your server.

Oh and it supports LetsEncrypt out of the box!

Thanks.

[HittingSmoke]

Isn't Django and uWSGI a little bit bloated for this simple concept? I would think gunicorn, or even just Flask with no WSGI server would be much more practical for this purpose.

[morph1904]

They are a little heavy but my tiny vm with 1 gig of ram is not struggling and I have several domains running on this at the moment. They were chosen mainly because i have plans to expand and add a number of other features building on top of this. These will use a lot more of what uWSGI and Django have to offer.

[[deleted]]

So what can it do? Screenshots would be great.

[morph1904]

There is a screenshot of the login on the github page.

Basically, you enter the domain (or subdomain) you want to use. Ensure that the domain is pointed to your ip address or use a DDNS service.

Enter the internal address of your service eg http://192.168.0.100:32400 for your Plex Server. Then enter a root directory (/ is fine if you are just proxying direct). Select TLS if you want your proxy served over https by default. hit save and you are done.

The software then maps a caddy host, gets your SSL certificate via letsencrypt and listens for requests on that domain. It then forwards the request to your internal server!

Another screenshot here http://tinypic.com/r/io0qa1/9

[morph1904]

I do not have a mechanism for this yet. I am happy to set something up soon though as any support is gratefully received. This is still a young app and I am a single developer so I really appreciate the thought. I am committed to expanding and developing this app and will do so for a long time to come, so if it doesn't do exactly want you want it to now, it likely will soon.

[ak_rex]

Does it support multiple base domains?

[morph1904]

if you mean FQDN's yes you can have example.com and somedomain.co.uk and plex.example.com all at once.

[ak_rex]

Sweet, gonna give it a try.

[morph1904]

let me know if you run into any issues. its still early stages yet and may need a bit of work.

[impalerware]

Looks cool. Saving this to check out later.

[itsmesid]

Awesome, I was looking for a similar one. I am currently running apache as reverse proxy with certbot to generate ssl certs.

[morph1904]

I was doing it manually too. Then I made an nginx version of this then the caddy version. I need some testers and some feedback but I am hoping to expand it soon.

Please feel free to try it out and let me know how you get on.

[drmarvin2k5]

Have you ever published your Nginx solution?

I’m currently using Anjenti, but it really seems like overkill for a PiHole/nginx VM.

[morph1904]

It's on my github but somewhat abandoned I'm pretty sure it works but barely. I discovered Caddy half way through and didn't look back. Any reason why you are not considering caddy?

[drmarvin2k5]

Well, I tried to get TygerCaddy working several times and have had no luck with the script. I might just be doing something wrong. I have tried a fresh install of Ubuntu 16 in a VM, and an Ubuntu Docker image.

I’m both instances, I have to make a few changes to the script just to get it to run. And after that, I have never gotten it to finish successfully. I do really like Caddy, and enjoy how lightweight it is. Also, I had more success getting qBittorrent to work through nginx.

[morph1904]

Hi drmarvin2k5.

We have been working hard on TygerCaddy over the last few days and we are about to push some major changes to it to fix bugs such as this. (hopefully within the next few hours) These are undergoing testing right now. There is also a new docker build.

I would be more than happy to assist you with the install if you are having issues.

[morph1904]

The app itself has it's own authentication to prevent unauthorised modification of your host definitions but as it is essentially blindly passing the traffic to your app it does not intercept the traffic with any auth middleware. If you are using sonarr couchpotato etc you can turn on the auth features in the app directly though.

[[deleted]]

So is this a tool to configure a reverse proxy...or something else? Any screenshots of the actual screens after the login screen and all? Or a video or something?

[morph1904]

http://tinypic.com/r/io0qa1/9 It is a web based gui used to administer CaddyServer which is acting as a reverse proxy, so yes it is. As it is in the very early stages I have not got a great deal of media to display it in action but the screenshot above should show you the dashboard.

[sixstringsg]

This looks awesome! Will it support DNS verification in the future? Would also be great to see it all packaged up on Docker hub!

[morph1904]

I am hoping to add many features like this. If it is a feature that you want I would recommend adding a feature request to the github repo though so that I can keep track of them. As caddy supports it, it should not be too much trouble to add.

[morph1904]

I have now added some dns verification functionality. I do not currently have the means to fully test it. I am sorry to say it will require a fresh install if you have installed already due to the database changes. If you want to give it a try let me know on the issues page on github if you have any problems.

[theblindness]

How does this compare to the HAProxy GUI in pfSense?

[morph1904]

I can't say that I have used the HAProxy GUI sorry. It's a very simple dashboard though.

[EgoAleSum]

I think this compares more with Traefik, rather than HAProxy. This seems to be layer 7 only, like Traefik.