@jwildeboer @homelab very cool, I am also planning to test out Garage after your recent posts!
How do you handle DNS settings of your end devices with that internal DNS? A lot of browsers now default to public DoH, and will thus not get the internal DNS entries. I can of course deactivate that for devices under my control, but for homelab services I want to make available to guest this is an issue I have not yet solved.
Notices by Nils (thasl@social.tchncs.de)
-
Embed this notice
Nils (thasl@social.tchncs.de)'s status on Tuesday, 13-Jan-2026 23:24:32 JST
Nils
-
Embed this notice
Nils (thasl@social.tchncs.de)'s status on Tuesday, 13-Jan-2026 23:24:29 JST
Nils
@ben that makes so much sense, thanks for the hint! I indeed have the same domain for externally available services as well as my homelab, I always wondered why FF would only _sometimes_ resolve correctly to my internal IPs.
What would the best approach be here? Have a completely separate domain only for the homelab? @jwildeboer what are you using here? I figured using an existing domain would make sense so I could get certs via the LE DNS challenge. Own CA would be an option, but again only for devices I control, not guests.
But anyway thanks for all the input, very valuable as I am only at the start of my homelab journey :) @homelab -
Embed this notice
Nils (thasl@social.tchncs.de)'s status on Tuesday, 17-Dec-2024 23:07:13 JST
Nils
@jwildeboer Thanks for your recent posts on that topic, was very helpful and pushed me to finally do the same :)
How did you protect/hide your Forgejo instance? Just setting repos to private, or is there an additional layer, esp in front of the web app, like client certs or a proxy?