Internal domains

[gaizkaeu]

Hey. First of all thanks for this project. This was the only reverse-proxy with VPN that gave me full throughput. I have tried netbird and pangolin, and I couldn't get speed over 6MBps https://github.com/orgs/fosrl/discussions/512.

My question is about internal domains. I have some services that I'd to access but not expose to the public internet. These are mostly http services that I'd like to proxy to the standard https port, add ssl certificate...

I have read in the docs about this internal domains but I couldn't find more information.

Is this a fully functional feature? If not, with some information/roadmap and guidance I could submit a PR.

Thanks

[dmesad]

Hey, thanks a lot for the kind words and for sharing your experience! Really glad to hear Wiredoor worked well for you in terms of throughput.

Regarding internal domains: yes, you can register local/internal domains and proxy HTTP services to HTTPS, but at the moment this is supported using self-signed certificates.

This is a functional feature, but still limited and evolving. For more details, current status, and discussion about future improvements, please check this issue: #84

If you’re interested in contributing, a PR would be very welcome 👍
Thanks again for the feedback!

[gaizkaeu]

Thanks. I got it running, the domain validation confused me, works wonders. I do have the need for DNS01 challenge certificate issuing. Since the code already supports some DNS Provider integration I can make a PR to add this feature. It should be pretty straightforward.

Let me know if it's interesting for you.

[dmesad]

We already have integrations with DNS providers (Cloudflare and GoDaddy) for automatic DNS management, but we don’t have DNS-01 support with Certbot yet. I've been doing some experiments around it, but nothing solid or production-ready so far.

If you want to configure DNS providers, the current setup is documented here:
https://www.wiredoor.net/documentation/usage#automatic-dns-providers

A PR adding DNS-01 support would definitely be interesting. Feel free to open an issue or a draft PR so we can align on the approach before going too deep.

You can also reach me directly at support@wiredoor.net if you want to discuss details or ideas.

Thanks for offering to contribute!