So maybe I am missing something obvious, but here goes:

I’ve got a small server at home, and I have simply.com pointing various domains to it. Works fine, nginx routs the traffic where it needs to go.

But whenever I am at home and connected to wifi I have to use the internal address and port to reach my server, e.g. 192.168.0.192:8096 for my Jellyfin server. If I use the public URL at home, i hit the login page to my router.

This is annoying when I use apps, as I need to switch between the public URL and the internal address as I come and go from my home…

What are my options for doing something about this? I want to use the public URL at home too…

  • slazer2au@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    1
    ·
    4 months ago

    You may have to set up split zone DNS so names resolve to private IPs when at home but resolve to public addresses when not home.

      • azron@lemmy.ml
        link
        fedilink
        English
        arrow-up
        5
        ·
        4 months ago

        This is what I do as well. I use terraform/tofu and add two entries whenever I add a new domain, one for my external provider and one for my pihole pointing at my internal IP for my home network.

    • EvilCartyen@feddit.dkOP
      link
      fedilink
      English
      arrow-up
      14
      ·
      edit-2
      4 months ago

      Thanks - I have an icotera i4850 router which claims to support NAT loopback, but I can’t figure out where to do it and it seems like the manual is gone from the internet :) Might have to ask my internet provider if they have a PDF somewhere.

      Edit: D’oh, it’s a checkbox in the port forwarding interface! Thanks a bunch, didn’t know what to look for before your reply :)

    • Creat@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      11
      ·
      4 months ago

      Another name, depending on the exact context, is “hairpin NAT”. Should make googling with the specific router OP has easier.

      • CameronDev@programming.dev
        link
        fedilink
        English
        arrow-up
        3
        ·
        4 months ago

        Never heard that term, but its a very obscure concept, so wouldn’t surprise me if it had multiple names. Probably vender specific names?

        Seems quite a few people havent heard of it, hence a lot of the split DNS answers :/

  • Knossos@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    ·
    4 months ago

    On my Fritzbox, I needed to add all my Subdomains to a list under:

    DNS Rebind Protection Your FRITZ!Box suppresses DNS responses that refer to IP addresses in its own home network (DNS rebind protection). Here you can specify exceptions for which DNS rebind protection should not apply. Do this by entering the complete name of the host (domain name including the subdomain) in the list.

    That’s under network settings, advanced. In case you have that.

    • Morethanevil@lemmy.fedifriends.social
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      4 months ago

      Indeed it is DNS rebind protection.

      I use wildcard on my Fritzbox. I added *.mydomain.com and my MyFritz address *.er467.myfritz.net

      Important for everyone who makes changes on DNS rebind protection: You will need to completely RESTART your Fritzbox. Even if you add a line, or edit. One domain per line. It will not work without it ☝🏻

  • Decronym@lemmy.decronym.xyzB
    link
    fedilink
    English
    arrow-up
    4
    ·
    edit-2
    4 months ago

    Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

    Fewer Letters More Letters
    DNS Domain Name Service/System
    IP Internet Protocol
    NAT Network Address Translation

    3 acronyms in this thread; the most compressed thread commented on today has 15 acronyms.

    [Thread #825 for this sub, first seen 23rd Jun 2024, 06:25] [FAQ] [Full list] [Contact] [Source code]

  • powermaker450@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 months ago

    usually in your router settings you can change local DNS settings. you can set your domains and subdomains to point to your server’s local IP.

  • peregus@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    4 months ago

    To bypass this problem you can add your domain (with all the third level ones) to your router, pointing to your internal IP

      • aaravchen@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 months ago

        FYI, this is called “split horizon” DNS, where the location you get directed is based on the network you adk from. Make sure you have short TTLs set on your DNS records, or devices can have problems moving between networks and still having records cached from the prior network

  • raf802@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 months ago

    Based on my setup, I use adguard to DNS rewrite all *.example.com domains to the IP of my Nginx proxy. I have the proxys setup on NPM. On my router I have adguard set as the home network DNS. Cloudflare is used as the external DNS so that the *.example.com domains work outside of my network (and point to thr Nginx server).

    My setup is relatively basic, unraid dockers etc.

  • cmnybo@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    4 months ago

    If your ISP provides IPv6, set that up. Everything will have a globally routed address, so your domains will work from your LAN and the internet. If you don’t have IPv6 available, get a free tunnel from Hurricane Electric.

  • jet@hackertalks.com
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    4
    ·
    4 months ago

    Ipv6

    Depending on your gateway, you may be able to override the DNS settings for a few domains that you use internally