A reverse proxy server and cluster network gateway for noobs
Zoraxy describes itself as:
“General purpose request (reverse) proxy and forwarding tool for networking noobs. Now written in Go!”.
Yet it seems to be packed with goodies and features, such as Geo-IP & Blacklist, ZeroTier controller integrated GAN, IP Scanner, Real Time Stats and even built in Uptime monitor. Addtionally, it can run via a single binary for those who don’t want to rely on Docker. There is also an Unraid Template available from IBRACORP. Lastly the project is under the AGPL license 🌻
I also checked, and saw this was recommended on this community 9months ago, but didn’t seem to get much attraction then. Has anyone tried this yet? It seems like a good alternative to say NGINX proxy manager and am wondering if I should switch, but wanted to hear thoughts first!
I tried it out yesterday. All I wanted to do was add names to my services. I managed to get Homarr to show up when I go to server.local but couldn’t then get Overseerr to show when I go to overseerr.server.local or server.local/overseerr
So after an hour or so of fiddling I gave up.
I use Tailscale so I just don’t need to have everything sent to my domain, but I’m struggling just keeping it all on the local network.
I wish I’d seen this before the minor hell I went through learning how to geoip block via iptables. 😁
It looks interesting. I think my only real concern is security. There’s a lot of people using and working on nginx so, presumably, more people to identify bugs and squash them.
That looks pretty cool. I think it’s just that everyone kinda picked their setup at the start and nobody wants to mess with it anymore lol.
I’ve got traefik setup so that I just add a few lines to a docker compose file and I’ll automatically have a new service running under a new subdomain, with SSL certificate and all. Never have to think about it.
I just have a wildcard subdomain record. (CNAME: *.mydomain.com)
Then the traffic gets sent to Traefik which checks the request for what subdomain it is asking for and routes it accordingly.
It’s just two label lines in each docker compose with whatever subdomain I want to use and a minute or two later it’s gotten the certificates and it’s available.
Ah, that would make it easy. I can’t use a wildcard with most of my domains, but maybe I could set up subdomains to have this convenience for dev/test sites. Thanks!
I suspect it would be trivial to add a hook to dynamically create (and remove, maybe) DNS records, just haven’t tried yet.
I use Zoraxy on all my servers, it replaced Nginx proxy manager (NPM) for me completely. Installed on my host system, it points directly into docker containers via IPV6 in most cases.
For services that I run on the host directly, it points to nginx or apache, both work well with Zoraxy. Synape, Mastodon, Immich, Vaultwarden, Jellyfin, Nextcloud, WordPress… No problem
If you run Zoraxy in docker, it works like NPM, but it has no advanced tab for additional configuration. It is just a reverse proxy, not a full web server like NPM, which is basically a GUI for nginx.
You will need nginx in addition for traffic splitting for some services, like Synapse or Mastodon, even in docker. In NPM this is called locations
I think it is beginner friendly, since those users mostly use docker containers. Container mostly work out of the box like in NPM. They can use Zoraxy in docker too and point it directly to a container name and port, immich_server:3001 for example. Same as in NPM
Why? It is a reverse proxy, not a fully webserver, this is the difference from Nginx Proxy Manager, which includes Nginx. But advanced configuration can be a pain with NPM too, just look for Synapse and Delegation. This is troublesome for most users of NPM.
Zoraxy can serve a static website, but traffic splitting like for Synapse, MinIO or Mastodon is part of a (fully) webserver.
I use Zoraxy as a reverse proxy for easy managing my services, mostly directly in containers, but I use it with Apache and Nginx on the same host too for WordPress and Nextcloud for example.
Beginners will mostly only use docker containers, without further configuration, like in NPM and this works out of the box :)
Splitting traffic on a reverse proxy host based on various triggers is a pretty common thing for a reverse proxy to do. Caddy does it, Nginx does it, HAProxy does it.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
I tried it out yesterday. All I wanted to do was add names to my services. I managed to get Homarr to show up when I go to server.local but couldn’t then get Overseerr to show when I go to overseerr.server.local or server.local/overseerr
So after an hour or so of fiddling I gave up.
I use Tailscale so I just don’t need to have everything sent to my domain, but I’m struggling just keeping it all on the local network.
I wish I’d seen this before the minor hell I went through learning how to geoip block via iptables. 😁
It looks interesting. I think my only real concern is security. There’s a lot of people using and working on nginx so, presumably, more people to identify bugs and squash them.
Yeah that’s a valid point, especially if you’re pointing this to the outside world.
I’m still curious tho. I’ll probably set it up for some internal only sites to test.
Let me know if the Screenshots are loading or not… on mobile they dont seem to load for me, but on PC they do…?
They’re not working for me
could u check now?
Now they’re working
They load on the link to github, but not here on Lemmy.
hopefully fixed now?
They’re working for me on PC.
Not working for me
should work now :)
Yes, I did. But I couldn’t get my Homeassistant to work routing through it, so I switched back to Proxy Manager…
That looks pretty cool. I think it’s just that everyone kinda picked their setup at the start and nobody wants to mess with it anymore lol.
I’ve got traefik setup so that I just add a few lines to a docker compose file and I’ll automatically have a new service running under a new subdomain, with SSL certificate and all. Never have to think about it.
Have you automated host record creation?
I just have a wildcard subdomain record. (CNAME: *.mydomain.com)
Then the traffic gets sent to Traefik which checks the request for what subdomain it is asking for and routes it accordingly.
It’s just two label lines in each docker compose with whatever subdomain I want to use and a minute or two later it’s gotten the certificates and it’s available.
Ah, that would make it easy. I can’t use a wildcard with most of my domains, but maybe I could set up subdomains to have this convenience for dev/test sites. Thanks!
I suspect it would be trivial to add a hook to dynamically create (and remove, maybe) DNS records, just haven’t tried yet.
Out of curiosity, why cant you use a wildcard?
Lots of different hosts, multiple load balancers / ingress controllers.
I too am interested.
Looks interesting! The ui looks miles ahead of NPM, so I might need to check it out
I use Zoraxy on all my servers, it replaced Nginx proxy manager (NPM) for me completely. Installed on my host system, it points directly into docker containers via IPV6 in most cases.
For services that I run on the host directly, it points to nginx or apache, both work well with Zoraxy. Synape, Mastodon, Immich, Vaultwarden, Jellyfin, Nextcloud, WordPress… No problem
If you run Zoraxy in docker, it works like NPM, but it has no advanced tab for additional configuration. It is just a reverse proxy, not a full web server like NPM, which is basically a GUI for nginx.
You will need nginx in addition for traffic splitting for some services, like Synapse or Mastodon, even in docker. In NPM this is called locations
I think it is beginner friendly, since those users mostly use docker containers. Container mostly work out of the box like in NPM. They can use Zoraxy in docker too and point it directly to a container name and port, immich_server:3001 for example. Same as in NPM
That sounds like a pretty major missing feature.
Why? It is a reverse proxy, not a fully webserver, this is the difference from Nginx Proxy Manager, which includes Nginx. But advanced configuration can be a pain with NPM too, just look for Synapse and Delegation. This is troublesome for most users of NPM.
Zoraxy can serve a static website, but traffic splitting like for Synapse, MinIO or Mastodon is part of a (fully) webserver.
I use Zoraxy as a reverse proxy for easy managing my services, mostly directly in containers, but I use it with Apache and Nginx on the same host too for WordPress and Nextcloud for example.
Beginners will mostly only use docker containers, without further configuration, like in NPM and this works out of the box :)
Splitting traffic on a reverse proxy host based on various triggers is a pretty common thing for a reverse proxy to do. Caddy does it, Nginx does it, HAProxy does it.
I use Caddy. It works from Cli but very ez to use. Might try this in the future tho
Same. Caddy is absurdly simple to configure
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
3 acronyms in this thread; the most compressed thread commented on today has 10 acronyms.
[Thread #714 for this sub, first seen 26th Apr 2024, 16:15] [FAQ] [Full list] [Contact] [Source code]