Hacker News Reader

Yes, I use wireguard to link VPS with an array of computers in my home via point to point tunnels. This solves the "my home IP not being completely static" problem, because wg handles roaming quite gracefully.

And then I just use either DNAT or nginx reverse proxy to proxy https to some http ports at home, depending on the service.

View on HN

Interesting! I've never used wireguard before. When you link it with the VPS, is it able to behave as if ports from your home network are running natively on the VPS?

I'll look into using DNAT/nginx, but I really do like having everything in a format where all the configuration is self contained in code and can be spun up / down easily, and I'm not sure if I can accomplish that using those tools

You'll see a wireguard network interface on all the connected devices, and you can configure some private address subnet on it, like 192.168.1.0/24 and give the devices some addresses from this range.

Then you can just talk between any of the devices via this subnet. Wireguard will securely tunnel the traffic.

https://www.wireguard.com/

DNAT is just a concept https://en.wikipedia.org/wiki/Network_address_translation

You can set it up using iptables or nftables.

You don't need to use nginx, use http reverse proxy you know.

Reply on news.ycombinator.com