I have a flint 2 (glinet) as my firewall as well, I had read somewhere that I should install vanilla OpenWRT so I did (I have added stuff to it so I like coming up with different flavours when talking to people like rocky road). I have Caddy running in docker on a pi in my LAN I have a password file of some sort that Caddyfile references at the top. Don’t ask me how I formatted it because I do not remember that part but take my secondary pihole as an example of using a domain that cannot be reached, from outside of my lan.
pihole52.reannlegge.ca {
@allowed {
remote_ip 10.0.0.0/8
}
handle @allowed {
redir / /admin{uri}
reverse_proxy http://10.0.69.52:31415/
}
handle {
respond "Not available from this network" 403
}
import easydns_tls
log {
output file /var/log/caddy/pihole52.log
format json
}
}
While other places on my domain can be reach outside of my vLANs. I have to secure some things up as I found that my SearXNG is open to the WAN.
Edit: looks like search.reannlegge.ca was available on the WAN if you where in Canada but I have changed that to only on my vLANs and VPNs
I learnt basic HTML as a youngling in the 90’s so back before it got very complex, no formal training. I pretended to learn python for my 100 level comp sci in the mid 00’s but completely forgot it after the class was over. I just got into the hobby recently because I did not want to continue paying for stuff but not owning stuff, and it was getting silly expensive for my unlimited free trial hack and personal blog. Plus I wanted to start getting away from big tech, so learning about self hosting from the web and double checking my stuff with Claude really helps.