{"type":"rich","version":"1.0","title":"David Pinkerton wrote","author_name":"David Pinkerton (npub1jz…aaju6)","author_url":"https://nostr.now/npub1jz0rlhp9ngs3at2kfhzcnc62sxh0y9rxt40x3z003wmdguljky9quaaju6","provider_name":"njump","provider_url":"https://nostr.now","html":"Wrote up how my homelab proxying strategy evolved over four phases — from port forwarding with DDNS to a VPS running nothing but HAProxy for L4 passthrough.\n\nThe key insight: keep the VPS dumb. SNI inspection, encrypted passthrough, nothing else. TLS termination belongs on hardware you control.\n\nComparison table of L7-on-VPS vs L4-passthrough vs direct port forwarding, plus thoughts on Traefik for automatic Docker service discovery.\n\nhttps://blog.dpinkerton.com/posts/evolving-reverse-proxy-strategy/\n\n#selfhosting #homelab #haproxy #caddy #traefik #reverseproxy"}