selfhostedops/selfhostedops-stack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Episode 5: NetBird mesh - control plane behind Caddy, Forgejo as IdP, services off the public internet

Browse source
This commit is contained in:
Maximilian Grimm 2026-08-28 12:26:31 +02:00
parent d5398caece
commit 8cebf425c6
3 changed files with 88 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
Caddyfile
View file

@ -21,11 +21,19 @@ status.{$DOMAIN} {
reverse_proxy uptime-kuma:3001
}
n8n.{$DOMAIN} {
reverse_proxy n8n:5678
}
# n8n has no public route any more - it is reachable over the mesh only (episode 5)
# NetBird control plane (episode 5) - dashboard, API, gRPC, relay, built-in IdP
vpn.{$DOMAIN} {
reverse_proxy wg-easy:51821
# Native gRPC (needs HTTP/2 cleartext to backend)
@grpc header Content-Type application/grpc*
reverse_proxy @grpc h2c://netbird-server:80
# Combined server paths (relay, signal, management, OAuth2)
@backend path /relay* /ws-proxy/* /api/* /oauth2/*
reverse_proxy @backend netbird-server:80
# Dashboard (everything else)
reverse_proxy /* netbird-dashboard:80
}