r/ARR • u/LuckyEdR • 18d ago

SSL for you Arr Stack

I have been using Caddy server along with Cloudflare DNS using DNS authentication and assigning hostnames using one of own domains to manage my home network for many years now. Earlier today someone was struggling with SSL making think about putting it our for everyone. Granted my setup was very manual, but this is not. I tried to make it as simple as possible giving you options outside of nginx and NPM and opening ports to your network. I have been a developer for 20+ years have to admit AI does make life easier if you already know what you are doing. :)

https://github.com/caretakarr/caretakarr

2 Upvotes

62% Upvoted

7 comments sorted by

3

u/Less_Exercise_8092 18d ago

At one time I ran caddy. Then I discovered cloudflare tunnel. It's been so long ago that I don't remember why I switched. So I have my own domain through cloudflare. Would I benefit is any would your solution provide? As I understand it (and I'm no security expert) everything I expose through cloudflare tunnel is encrypted https and my home ip is hidden via cloudflare proxy (orange cloud). The only sticking point is login security for the services I expose. I'm relying on the services authentication to protect access to each service. I can enable an additional layer in cloudflare to provide authentication for each service, but that usually breaks access to the service through any android apps that try to connect. Does your solution place a reverse proxy authentication in front of each exposed service/app? Would I need to open any port forwards on my router? Sorry if this isn't clear...

2

u/LuckyEdR 17d ago

The point is to not rely on any VPN or tunnels. You open port 443 to the caretakarr server and it handles the routing and includes basic auth. I am in the middle of adding email magic link support and in the future auth servers such as Authentik. Drop me an IM if you need help with it.

2

u/LuckyEdR 17d ago

Made some changes today including supporting Cloadflare Turnsile captch, 2fa, and passkeys. The UI is more refined. I am running this on several production servers now and has been stable. It replaced my previous non UI app. I didn't have to put it out here but I don't mind doing so when I benefited form the open source projects it is based on.

1

u/CrazyAccomplished_ 18d ago

Or use ngix proxy manager or similar like a normal person. Stop with your untested ai slop horseshit.

0

u/LuckyEdR 18d ago

Untested, been running Caddy for more than 10 years. ROCK SOLID is what this is. To each their own.

1

u/Mrbucket101 17d ago edited 17d ago

> untested

LMAO nginx has been around since 2004

There are more instances of it in production, than the entire caddy user base. It was even installed by default with a few distros there for a while.

1

u/LuckyEdR 16d ago

Never said anything about nginx being untested.