This sounds like something I'd want to do! Is the idea that you'd have a public ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		thatcherc on Oct 22, 2024 \| parent \| context \| favorite \| on: Just want simple TLS for your .internal network? This sounds like something I'd want to do! Is the idea that you'd have a public domain name like "internal.thatcherc.com" resolve to an internal IP address like 10.0.10.5? I've wondered about setting this up for some local services I have but I wasn't sure if it was a commonly-done thing.

AdamJacobMuller on Oct 22, 2024 [–]

I've been doing this for a year or two with k3s + cert-manager.

Works great.

In my case everything points to a tailscale operator endpoint, which goes to nginx ingress, which routes to the appropriate pods.

It's very much a set-and-forget solution.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact