Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • guy@piefed.socialEnglish
    21·
    2 days ago

    Thank you for the explanation. But that’s it than? Just convenience with ports?

    • boonhet@lemm.eeEnglish
      5·
      2 days ago

      Well it IS pretty nice to be able to tell people to go to jellyfin.example.com instead of example.com:8096, but you also get security benefits for using a properly set up reverse proxy. You don’t need to keep your ports open to the whole internet, only the reverse proxy accesses them. As far as the rest of the internet is concerned, you have :443 open.

      Edit: Forgot to add, Caddy and NPM and such can also automatically renew your certificates!