Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • guy
    link
    fedilink
    English
    13 days ago

    Thank you for the explanation. But that’s it than? Just convenience with ports?

    • @[email protected]
      link
      fedilink
      English
      5
      edit-2
      3 days ago

      Well it IS pretty nice to be able to tell people to go to jellyfin.example.com instead of example.com:8096, but you also get security benefits for using a properly set up reverse proxy. You don’t need to keep your ports open to the whole internet, only the reverse proxy accesses them. As far as the rest of the internet is concerned, you have :443 open.

      Edit: Forgot to add, Caddy and NPM and such can also automatically renew your certificates!