dsync89 Wiki

Appearance

Fully Secure Your unRAID Services from External Network Using Traefik ​

This is a very comprehensive guide I wrote that will hopefully guide you to secure any unRAID services from external access. It was written entirely by myself after compiling information from different sources as mentioned in the References.

By completing these tutorials, you will be able to access your unRAID services from anywhere with peace in mind knowing that nothing can get pass the barrier you set forth.

The benefits are:

  • No VPN setup. All you need is a browser and your phone (for OTP / Push notification).
  • Bullet-proof DDoS protection thanks to CloudFlare.
  • All traffic originates from CloudFlare and guarded against any malicious attack before reaching your server.
  • A reverse proxy that guard all traffic that reaches unRAID services.
  • A middleware that authentication and authorize user before access is granted to any unRAID service.

Aren't VPN enough?

💡 While it is still true that VPN offer very strong protection, it require setting up VPN client and credential and is best used for a device that the user owned. What if you simply want to quickly show off your homelab services or dashboard in a meeting or friend’s gathering using a big Smart TV browser? Thanks to CloudFlare + Traefik + Middleware it is now possible to secure public access to your unRAID services due to a series of protection.

I had broken the guide into several parts and you can go through them based on your preference.

Part 1

Install Traefik and Automate Hostname Creation

Part 2

Reaching Traefik from External Network Via CloudFlare Network

Part 3

Integrate with Authelia

Part 4

Set Routes for Home Network

Part 5

Summary

References ​

Following is a list of references that made these multi-part tutorial possible.