For instance how can I use my *.domain.com SSL certs and NPM to route containers to a subdomain without exposing them? The main domain is exposed.

  • slazer2au@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    7 days ago

    Split DNS on your LAN?

    Only records permitted to be access on your LAN are responded by a local DNS server. While public DNS still available for your public facing services.

    Your wildcard cert will work for both situations as the browser only cares the sni matches the Url in your address bar.

    • bigdickdonkey@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      7 days ago

      I’m using this right now but I’m switching to having all my services under one domain and blocking non internal ips. Technically someone can access your site by providing the host manually, althought it’s unlikely since they would need to know it

      • derek@infosec.pub
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 days ago

        Would you expanding in this concern? I’m not sure I understand but I’d like to.