u/ArgentSeven

I am currently using netbird to manage access to my homelab network. I have a few services that I have deployed using coolify, which my family uses. However, I don't want to give them access to the coolify dashboard itself. Currently, I am doing this by using he reverse proxy and netbird only authentication and made it users can access the services but not the dashboard. However, it has been very annoying that when we create resources on the network, we cannot put in the port have to put the port in separately in the "Add Target" section of the reverse proxy. Why do I have to put in resource and port separately? With this, I need to take a look at 2 places to get the whole ip address + port combo.

No option to put in port

Is there any reason why port is not part of the resource? Am I missing something here? Would really appreciate if we can introduce this to netbird or if someone can educate my why this is the way it is.

P.S. I already had a setup previously where instead of using independent resources, I'd point all off my reverse proxy services into my network's nginx proxy manager just so that I don't have to put in ports manually and I can take a look at my services at a glance.

Edit : I should probably also explain that I am hosting everything on proxmox which by default hosts different services on different IP. I would understand if the above setup if I was using something like docker where different services have the same address but different port

Hi, I’m running a self-hosted instance of NetBird on a VPS, along with a client on the same VPS to connect to it. Until now, all my services have been hosted either on the VPS or on my Proxmox home server. Recently, I started hosting a service that’s available on both machines. I want to keep these services private, so they shouldn’t be exposed to the internet—only accessible to users connected to my NetBird network.

Previously, using service.domain.com worked well. But now that the same service is running on both machines, I’d like to use separate subdomains, like service.vps.domain.com and service.proxmox.domain.com.

Is there a way to achieve this only by creating a zone and a DNS record? Creating a service works, but it exposes my service to the internet, whereas creating the zone + DNS record keeps it private.

Alternatively, is there a way to create a private service so that its only available if one is connected to my network?

Hi,

I am new to self hosting and I have so far hosted netbird server in a vps, authentik on my vps, netbird clients (in the vps and my home proxmox) and vaultwaden in my home proxmox. I also followed a guide to add SSO using authentik to both my netbird and vaultwarden.

So, when I try to access vaultwarden.example.com, I have to go through netbird policy and SSO and then vaultwarden SSO. This works very well on the browsers (both on PC and android) but it doesn't work on android app at all.

The app moves me to a browser where I just get the error

{"error":{"code":404,"description":"The requested resource could not be found.","reason":"Not Found"}}

I tried debugging this using chatgpt, and it suggests that this is because in my current setup, I have 2 layers of auth (Mobile app → NetBird SSO → Vaultwarden SSO → Authentik) and suggests that I disable the SSO on netbird so that we can use just the home assistant OIDC.

However, I am not sure if its the best idea of exposing vaultwarden (even with authentik) to the internet. Ideally, I want to maintain a strict control on who can access my HA instance - family is okay but not friends.

Has anyone done something like this?

Hi,

I am new to self hosting and I have so far hosted netbird server in a vps, authentik on my vps, netbird clients (in the vps and my home proxmox) and home assistant in my home proxmox. I also followed a guide to add SSO using authentik to both my netbird and the home assistant.

So, when I try to access ha.example.com, I have to go through netbird policy and SSO and then HA SSO. This works very well on the browsers (both on PC and android) but it doesn't work on android app at all.

The app moves me to a browser where I need to login using authentik and then instead of sending me back to the app, it opens an instance of HA on the browser. I tried debugging this using chatgpt, and it suggests that this is because in my current setup, I have 2 layers of auth (Mobile app → NetBird SSO → Home Assistant OIDC → Authentik) and suggests that I disable the SSO on netbird so that we can use just the home assistant OIDC.

However, I am not sure if its the best idea of exposing the home assistant (even the OIDC) to the internet. Ideally, I want to maintain a strict control on who can access my HA instance - family is okay but not friends.

Has anyone done something like this?