Hi, I was planning on the VPS+Reverse proxy setup instead of port-forwarding from my home address (basically, Wireguard VPN to VPS box which will host a reverse proxy, be hardened and only open necessary ports). I will be hosting Pi-Hole+Unbound at home, and would like to access it from outside. I do not want to share my DNS with anyone else. How would I be able to achieve that with this setup? Do I have to open a port on the VPS for another VPN endpoint (Wireguard), which will basically mean I have to go through two VPN tunnels to get to my DNS? I can’t quite figure it out.
Thanks for your time!
Sounds like you need Cloudflare. The free tier should be just fine.
Cloudflare DNS proxied dns to be exact too. They also allow DNS only which is not routed through Cloudflare and the services.
Cloudflare has great free tier network solutions that being said:
If you outsource your network you outsource your control, and in this case you must be sure you can trust them.
The software mentioned here by the other people to do it yourself is not more difficult to setup and maintain than Cloudflare.
Last question one should ask themselves is why do I run a homelab and does outsourcing parts to third party vendors fit in to my objectives.
Indeed, the reason I mention the VPS+reverse proxy setup is specifically because I want to avoid Cloudflare or other entities and hopefully have more control over my infrastructure
Hi, thanks for the suggestion, but the reason I mentioned a VPS+Reverse proxy explicitly is because I don’t want to use Cloudflare.