In a previous post I recorded the state of my network at the time, which included no centralized reverse proxy. There was no need. I accessed my services locally and each of the service host ran its own reverse proxy on its own IP. I show this configuration in the diagram below.
✅ Multiple Reverse Proxies (LOCAL ONLY)
graph TD
subgraph lan[🏠LAN]
client[🧑💻Client]
subgraph hostA["🖥️Docker Host"]
reverseproxyA["🚪Reverse Proxy"]
serviceAA["🧠LLM"]
end
subgraph hostB["🖥️Kubernetes Host"]
reverseproxyB["🚪Reverse Proxy"]
serviceBA["🖼️Photos"]
serviceBB["📝Blog"]
end
end
client -->|192.168.1.10:443|reverseproxyA
client -->|192.168.1.11:443|reverseproxyB
reverseproxyA -->|llm.domain.com|serviceAA
reverseproxyB -->|photos.domain.com|serviceBA
reverseproxyB -->|blog.domain.com|serviceBB
However, now I would like to access certain services from beyond my local network, and not just for myself. I want them to be accessible to all web users, otherwise I would simply set up a client-to-site VPN and be done. I want them to be accessible over HTTPS.