what's the simple way to map services to subdomains instead of specifying the port number?
2026-07-12 00:17 UTC
Replies (14)
-
@litchralee@sh.itjust.works 2026-07-12 00:51
What is the absolute simplest way to accomplish this? The absolute simplest way is to use IPv6: on your Debian machine, assign multiple IPv6 addresses, one for each service you want to expose to your LAN. There’s no penalty with having a dozen v6 addresses. Although you have those addresses, your machine generally uses just a single one for its own outbound and inbound traffic. For each service, you would edit their config so that they bind to a specific IPv6 address. Finally, you would configure an AAAA entry in DNS so that your chosen subdomain will point to the IPv6 address in question. As an example, suppose you had three different web servers running Nginx, currently on port 80, 8081, and 42069. What you would change is the server config for each server instance, adidng the IPv6 address as part of the “listen” directive. Since each instance is now bound to a different IP address, nginx can now listen to the conventional port 80 and n’ary will the three collide. In other software, the configuration option you’re looking for is the “bind address”. By binding each app to its own IP, it will only respond if you send a request to that IP (or DNS name, which translates to an IP); this conveniently makes debugging really easy. For a home network, you might have a single /64 IPv6 subnet. But that still means you literally have billions upon billions of addresses to use before you ever run out. And as you’ve recognized, using DNS names to identify services is a lot easier and intuitive than using port numbers. It also neatly avoids the need to memorize IPv6 addresses, because that’s never been necessary: we have DNS. If your ISP won’t give you IPv6, you can still use locally-assigned private ranges, known as ULA, and this works because your services are contained to your LAN. Best practice is to randomly generate a subnet then use it.
-
@stratself@lemdro.id 2026-07-12 02:39
Use Caddy on each device, with tls turned off. Basically http://service1.devicename.lan/ { tls off reverse_proxy localhost:8000 } http://service2.devicename.lan/ { tls off reverse_proxy localhost:8096 }
-
@moonpiedumplings@programming.dev 2026-07-12 00:23
You want a reverse proxy. A reverse proxy reads requests to subdomains and then forwards them to ports and back. The easiest GUI one is: nginxproxymanager.com But there is also just straight nginx, or you can use Caddy or traefik or anything else.
-
@algernon@lemmy.ml 2026-07-12 00:22
If all your services support binding to a unix socket, I’d bind them to /run/.sock or similar, and set up a reverse proxy that hits /run/$servicename.sock when serving $servicename.devicename.lan. If the service can’t bind to a unix socket, you can probably socat it or similar, and keep using the generic reverse proxy. Then, all your router has to do is route port 80 to your Debian machine.
-
@un_ax@lemmy.today 2026-07-12 01:49
If they’re just internal the simplest way is to add another IP on the same interface to whatever is serving your service, then bind the service to that IP and add the entry in DNS. If for some reason you want to keep everything hosted on one IP, for a reverse proxy, caddy is pretty simple. An example caddyfile would be: http://service1.devicename.lan/ { reverse_proxy 1.2.3.4:9005 } http://service2.devicename.lan/ { reverse_proxy 127.0.0.1:1234 } This would also allow you to set https in the future using ACME (dns method if internal only) or your own CA / custom cert.
-
@StrawberryPigtails@discuss.tchncs.de 2026-07-12 04:15
Not sure if it’s the simplest way, but this is how I did it. I set up a reverse proxy service in a vm using caddy and then used pihole (also in a vm) to set up a local DNS record pointing to the reverse proxy. The systems need to be set up to use the pihole server as their DNS resolver. How it works is you type audiobookshelf.local.lan in the address bar and it queries pihole which says it at 192.168.1.100 or whatever. The Caddy web server at that address then passes the request on to the service at 192.168.1.60:8080. Setup is a bit tedious but it has worked for me.
-
@nbsp@programming.dev 2026-07-12 04:32
doc.traefik.io/traefik/ if you dockering i use with openwrt DNS Forwarding to create a wilcard domain (eg service1.nbsp.lan, service2.nbsp.lan etc), then when i vpn in all my services just work ™️… kinda
-
@Reannlegge@lemmy.ca 2026-07-12 04:42
I wanted to say I know this one, but a lot of people beat me to it use caddy.
-
@possiblylinux127@lemmy.zip 2026-07-12 05:02
You just need a reverse proxy
-
@Nomad@infosec.pub 2026-07-12 05:04
Read up on the host header, any http server can parse that. Set up DNS resolver and the http server does the rest. If you already serve from a reverse proxy, just change the port setup to a host header based setup. The term to search for is vhost config.
-
@Decronym@lemmy.decronym.xyz 2026-07-12 06:30
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread: Fewer Letters More Letters CA (SSL) Certificate Authority DNS Domain Name Service/System ISP Internet Service Provider NAT Network Address Translation ULA Unique Local Address (non-routable local address, IPv6) nginx Popular HTTP server [Thread #52 for this comm, first seen 12th Jul 2026, 06:30] [FAQ] [Full list] [@Two9A@hachyderm.io] [Source code]
-
@kokesh@lemmy.world 2026-07-12 07:29
Nginx manager. Surprisingly simple.
-
@Danitos@reddthat.com 2026-07-12 05:48
I have that exact setup. Let’s suppose you want to use layzer.lan as your domain. The way I did it: Make a DNS record that maps *.layzer.lan to your private IP (let’s say it is 192.168.0.10). You can do this by either manually editing your local DNS resolver config file, or hosting a DNS server and adding a a new entry. I did the later, and chose AdGuard for that. Either option will make your PC underestand that going to any subdomain *.layzer.lan means going to 192.168.0.10. Use a reverse proxy. I use nginx-proxy-manager, and added a proxy host for each service you want to access with the link. For example, for my Immich server that is running in port 30041, I added a proxy host such that immich.layzer.lan takes you to 192.168.0.10:30041. Ports 80 and 443 have to be free for nginx to take. You can also add https support from here, and it’s very easy to do if you have bough a real domain. Offtopic: I just noticed that on my Lemmy Android client you appear as laserjet, but on web you appear as layzerjeyt lol. Any idea why?
-
@ikidd@lemmy.dbzer0.com 2026-07-12 20:40
In OpenWRT, add an entry in DNSmasq under General - Addresses of /myfakecomain.com/<serverIPAddress This will make every variation of service.myfakedomain.com resolve to that address (assuming you have the hosts on your network obtaining DNS via the OpenWRT router). Then set up a reverse proxy on that server or whereever you’re directing that wildcard. If you have a lot of docker stacks on that machine, I’d suggest Traefik because you can just configure the compose files with the hostnames you want for that service, and it’ll update Traefik to redirect that hostname to that container. You can also add bespoke entries to Traefik for non-container services, or other services on your network to redirect towards.