• state_electrician
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 month ago

    It’s a domain with hosts that all resolve to private IP addresses. I don’t care if someone manages to see hosts like vaultwarden, cloud, docs or photos through enumeration if they all resolve to 10.0.0.0/8 addresses. Setting up a private resolver and private PKI is just too much of a bother.

    • fine_sandy_bottom@lemmy.federate.cc
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      My set up is similar to this but I’m using wildcards.

      So all my containers are on 10.0.0.0/8, and public dns server resolves *.sub.domain.com to 10.0.0.2, which is a reverse proxy for the containers.