General help for RA

[djenson]

Hi there, i'm trying to get a secure remote access setup to my Jellyfin server, but i'm a bit confused about which software goes where. Heres the computers i can use

Windows 10 at home, running the jellyfin server. Must stay windows for other software unfortunatly. Dynamic external IP

Remote VPS that can run Ubuntu 22 or 20, weakish CPU and around 60GB storage so cant have jellyfin on here. Static external IP

I also have a domain available, connected to Cloudflare 

I have never set anything like this up before, but what goes where. Does the Caddy/Ngenix go on the Remote VPS? Do i need to port forward my windows 10 machine? How can i ensure it is secure? 

I'd really like a rough guide of what software should go where. All the guides seem to be for Linux machines. 

Thank you for any help

[TheDreadPirate]

Code:

Windows 10 (jellyfin)  <------VPN tunnel------> VPS (Caddy/Nginx/Apache - Domain points here)

A lot of people use Tailscale to securely link their VPS to their jellyfin server at their home. Tailscale should handle any changes with your home IP and adjust the tunnel accordingly.

[djenson]

Code:

Windows 10 (jellyfin)  <------VPN tunnel------> VPS (Caddy/Nginx/Apache - Domain points here)

A lot of people use Tailscale to securely link their VPS to their jellyfin server at their home.  Tailscale should handle any changes with your home IP and adjust the tunnel accordingly.

Thank you. Would i then somehow point the domain to the VPS?

[TheDreadPirate]

You would have to update the record for your domain to point to your VPS's static IP. I don't have a cloudflare domain, so I can't give you the specifics. But it should be a simple process in your cloudflare dashboard.

[bitmap]

In the Cloudflare dashboard, you create an A record in your domain's Zone that points to the IP address of your VPS. In the Dashboard, find your Zone (should be your domain name), click on it, click DNS. Create a new record if you don't have one already, and select "A" as the type. Enter the IP address of your VPS. I like to leave this proxied (i.e., leave the little cloud orange if it doesn't cause issues). Note that doing it this way means your top-level domain will only point to your VPS, which your reverse proxy should be set up to catch and redirect over your VPN tunnel back to your server at your home. Seems a bit indirect, but should work alright if you don't mind the extra latency.

With this setup, you wouldn't be able to run any other services on your domain. You'd have to set things up differently (your reverse proxy config would need the most alteration). Cloudflare is pretty simple on the DNS front.