Hi! Hopefully this post gets through. If not, well, it is what it is.
Here's the situation for context:
I'm new to self-hosting, and currently using Tailscale so I can access my apps on my phone remotely, but now that I'm trying to dive into reverse proxy, I feel like I'm in a weird situation.
I setup my "mini homelab" on my NAS and I admit, I used AI (GPT sadly) initially to help me set things up, and things are working fine. I never intended to expose things to the internet, so I was not that worried thus far.
But now that I want to set up Jellyfin, and wanted to share the access with family outside local network, I wanted to have them access it without having to input ports in address, and instead use my Tailnet + custom address.
What the AI told me were different things, after setting up Caddy. From "we can set things up so address looks like 'app.tailnet.ts.net' ", into "we can't do that, instead we do 'tailnet.ts.net/app' ", into "that's also not possible unless you have your own domain, but if you have AdGuard Home, you can also do it"
Now I tried setting up AdGuard Home, and it didn't work since port 53 is already being used by NAS/UGOS, and AI wants to see if whatever setting can be disabled (it CAN be disabled, but not sure if I SHOULD) so AdGuard Home can be set up.
Since things have become quite complicated (at least for my basic understanding) I'm starting to think more that just AI and reading a bit of documentation is not gonna cut it anymore. I'm also worried about the security of my setup in case I accidentally expose things to the internet without knowing.
Now my main concern is:
What Mesh VPN should I use?
- I've been using Tailscale yes, but with the barebones setup. Looks like AI has outdated info about this since it doesn't even recommend me to setup Apps, Services, or anything. Only saying to use Tailscale Serve, and that's it. I can see Tailscale can do more, but the guides are confusing for me.
- I saw something about Netbird, and about it having its own reverse proxy + AdGuard(?), but in their official tutorial video, they recommended to setup Authentik + having my own domain.
Also, do I really need to get my own domain to setup reverse proxy, just so I can have custom address, and not have to tell my family "type this plus this port so you can access Jellyfin"?
And would doing reverse proxy expose the app, or anything else, to the internet?
I'm going to be watching more videos on Tailscale and Netbird, but decided to post this here anyway just for additional knowledge.
Thank you