selfhostedops/selfhostedops-stack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Episode 5: NetBird mesh - control plane behind Caddy, Forgejo as IdP, services off the public internet

Browse source
This commit is contained in:
Maximilian Grimm 2026-08-28 12:26:31 +02:00
parent d5398caece
commit 8cebf425c6
3 changed files with 88 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
compose.yml
View file

@ -9,7 +9,7 @@
# uptime-kuma monitoring + alerts
# n8n automation hub
# wg-easy WireGuard VPN (optional — start with: --profile vpn)
# (full Netbird mesh gets its own episode)
# (the full NetBird mesh is in netbird/ — episode 5)
#
# Quickstart:
# 1. cp .env.example .env && edit it (domain, email, secrets)
@ -22,6 +22,11 @@ name: selfhostedops-stack
networks:
proxy:
driver_opts:
# Docker 28+ firewalls direct access to container IPs from other
# interfaces (raw PREROUTING drop per container). This lets the NetBird
# mesh interface reach the stack containers - see netbird/ (episode 5).
com.docker.network.bridge.trusted_host_interfaces: "wt0"
ci:
internal: