The setup I have does require a domain name, yes. I DNS challenge through cloudflare at the moment to get a wildcard cert for *.domain.tld and use that for my local services, including my modem, to serve with https.

I don’t have anything to help you, other than to say you’re probably onto it being something specific about your router wanting more info from the reverse proxy. I have an actiontec modem I proxy behind nginx proxy manager and it works fine without any additional configuration, though.

What I really wanted to comment on was my surprise that everyone in a self hosting community assumed you were exposing that to the public when you absolutely did not say anything that implied it. Do none of you reverse proxy your local services? It’s wonderful!

Edited to add: actually, what cert are you using? I recently switched to a wildcard cert via DNS challenge from Let’s Encrypt and everything has worked better since then.

Outsiders accessing all the services via tailscale is not an acceptable solution for me. Let’s say for sake of my goal that one service is a blog that I want anyone to be able to reach.

nslookup sub.domain.tld AGH.IP.Address

This should respond authoritative with the IP you need to access NPM’s VIP IP address.

That returns a non-authoritive answer only, but the address is Unraid.IP.Address (which NPM is running on). Here’s the AGH rewrite I’m trying:

Here is the result of the curl:

21:55:55.862001 [0-x] * [READ] client_reset, clear readers
21:55:55.863057 [0-0] * Host sub.domain.tld:443 was resolved.
21:55:55.863116 [0-0] * IPv6: (none)
21:55:55.863146 [0-0] * IPv4: Unraid.IP.Address
21:55:55.863183 [0-0] * [HTTPS-CONNECT] adding wanted h2
21:55:55.863234 [0-0] * [HTTPS-CONNECT] added
21:55:55.863274 [0-0] * [HTTPS-CONNECT] connect, init
21:55:55.863330 [0-0] *   Trying Unraid.IP.Address:443...
21:55:55.863396 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
21:55:55.863447 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
21:55:55.863518 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
21:55:55.863576 [0-0] * [HTTPS-CONNECT] connect -> 0, done=0
21:55:55.863625 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
21:55:55.863697 [0-0] * [HTTPS-CONNECT] adjust_pollset -> 0, 1 socks
21:55:55.863792 [0-0] * connect to Unraid.IP.Address port 443 from My.PC.IP.Address port 57824 failed: Connection refused
21:55:55.863894 [0-0] * Failed to connect to sub.domain.tld port 443 after 1 ms: Could not connect to server
21:55:55.863985 [0-0] * [HTTPS-CONNECT] connect, all attempts failed
21:55:55.864043 [0-0] * [HTTPS-CONNECT] connect -> 7, done=0
21:55:55.864094 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 7, done=0
21:55:55.864163 [0-0] * [HTTPS-CONNECT] Curl_conn_connect(), filter returned 7
21:55:55.864231 [0-0] * [WRITE] [OUT] done
21:55:55.864268 [0-0] * closing connection #0
curl: (7) Failed to connect to sub.domain.tld port 443 after 1 ms: Could not connect to server

I am willing to try almost anything! What are you thinking, like route them through a VPN or something?

Would this method allow other people to connect to one of the services? Let’s say, for sake of example, it’s a blog that I want people to be able to access, but I also want to access from within my own network at the same FQDN that strangers on the internet do.

Thanks for the detailed response! Those specs are very close to what I ended up getting a Synapse server running on. I would like to try getting Continuwuity going next and compare.

Welp, I got Synapse deployed before Continuwuity lol

Thanks, I’ll probably need it! I seem to be able to follow along a little bit better with Synapse at least, and there’s more troubleshooting stuff out there for it I think because it’s more widely used.

I’m eager to try out multiple things. Right now I’d settle for whichever I can get set up. The documentation for continuwuity is a little tough for me and my setup right now.

It was genuinely hard for me to find on DDG as well. It kept trying to correct to “continuity” >_>

https://continuwuity.org/

I did not ask for a recommendation of if I should use or not use Matrix. I stated in OP that I want to play around with it. I will decide if it’s right for my use-case.

I do appreciate that, but even a starting point would be nice.

I have honestly not seen anyone acting like they are “owed” these things by FOSS developers. We just want them.

Oof.

Thanks for highlighting the differences.

Thanks for the warning.

Thank you for sharing, this looks like it has potential and its brand new. Love you FOSS nerds.

Looks similar to Docmost.