this post was submitted on 26 Sep 2025
1332 points (99.8% liked)

Programmer Humor

26846 readers
434 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] CrayonDevourer@lemmy.world 4 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Just do Caddy instead of nginx/cerbot all that garbage. Caddy just simply handles it all for you: Subdomains, wildcard certs, authentication, ssl

My whole caddy config file is like 6 lines; something like

@mydomain.com {

ipaddress:port

path:/

}

And you can do all sorts of plugins that make it compatible with fail2ban, etc.

I hear Traefik is pretty easy to set up too.

[–] Vittelius@feddit.org 2 points 1 week ago

And if you don't have an unique public IP address, for example because you are behind CGNAT, you can use Pangolin. It tunnels all traffic from your homelab to a VPS via Wireguard and exposes your services via a Traefik reverse proxy. Pangolin also automates the Traefik setup and provides a webui to configure the individual proxies.

For a VPS I recommended ionos, because they offer servers with unlimited traffic starting at only 1€ per month with server locations in both Europe and the US.