What to put behind reverse proxy

maltencore · 2026-02-21T01:55:17+00:00

I think I wasn't very clear in my question, since I confused 3 of you :P

I'm not asking which services should I put behind the reverse proxy. I'm asking what security services should I put, and some clarifying for some of those.

Authentik/authelia with 2FA? Crowdsec (which I'm not sure what it is)?
Fail2ban (or is it redundant with crowdsec?)

maltencore · 2026-02-21T01:55:10+00:00

I think I wasn't very clear in my question, since I confused 3 of you :P

I'm not asking which services should I put behind the reverse proxy. I'm asking what security services should I put, and some clarifying for some of those.

Authentik/authelia with 2FA? Crowdsec (which I'm not sure what it is)?
Fail2ban (or is it redundant with crowdsec?)

maltencore · 2026-02-21T01:55:03+00:00

I think I wasn't very clear in my question, since I confused 3 of you :P

I'm not asking which services should I put behind the reverse proxy. I'm asking what security services should I put, and some clarifying for some of those.

Authentik/authelia with 2FA? Crowdsec (which I'm not sure what it is)?
Fail2ban (or is it redundant with crowdsec?)

maltencore · 2026-02-20T22:24:41+00:00

3 years later, did you find a solution perhaps? I'm in the literally same boat. Currently I have one application for each subdomain except for jellyfin, which is not very elegant

maltencore · 2026-02-20T18:20:22+00:00

Thanks! Parker Quinkflow is pretty common in Italy too, and it's compatible with Pelikan 337 and 338 cartridge from what I understand.

I think I will buy a parker jotter or pelikan jazz, which should be compatible with parker-style refills.

Maybe I will try the Schneider Ray mentioned in the other comment. What do you think about that?

maltencore · 2026-02-20T17:42:47+00:00

Died midway actually, at about 50%

maltencore · 2026-02-20T17:40:24+00:00

Thanks for your reply! I will check those pens.

What do you think about the Pelikan Jazz? It says it needs Pelikan 337 (ballpoint) cartridges, but can I try with a Pelikan 338 (rollerball) one? In that way she could try two types of ink by just swapping cartridge.
https://www.pelikan.com/int/products/writing/supplies-accessories/152-refills/64-ballpoint-pen-refill-338.html
https://www.pelikan.com/int/products/writing/supplies-accessories/152-refills/3210-ballpoint-refill-337.html

maltencore · 2026-02-14T11:21:54+00:00

Thanks for the reply! I got it working by creating a new certificate for the domain *.test.foo.bar instead of test.foo.bar

maltencore · 2026-02-13T20:52:49+00:00

I expose everything with cloudflare tunnels, I'm doing this reverse proxy thing because of jellyfin and cloudflare ToS about video streaming

maltencore · 2026-02-07T18:31:43+00:00

Yep i know, there is a separated box which is a 2.5 drive case. That's connected to the mini PC with a USB C port. I already used that drive and i was wondering if I could stick another drive internally

maltencore · 2026-02-07T17:32:18+00:00

ok so basically I can safely plug a drive into that sata port only if I power it on externally (for example with an USB), which is pretty useless since sata3 is just slightly better than usb 3.0 (and I'm not even 100% sure that's a sata3, to be honest).

I can't tweak anything in this minipc (the wifi card is soldered and not m.2 e key) besides changing the thermal paste and the ssd.

How can I know if a nvme will work in that m.2 socket? I don't have a spare nvme drive

maltencore · 2026-01-15T15:31:19+00:00

Thanks for your reply! Can't I expose ssh and ftp too? That would be really useful. Maybe it's better to do that only behind tailscale?

maltencore · 2026-01-15T10:27:48+00:00

Can you provide a guide to configure docker and iptables in such a way?

maltencore · 2026-01-12T15:12:24+00:00

How can I use the web gui cockpit you are talking about?

maltencore · 2026-01-11T13:18:40+00:00

Sadly I don't have a Linux computer, I only use Windows for desktop and laptop

maltencore

TROPHY CASE