<div dir="auto">I port forward 443 to a docker container running NPM (nginx proxy manager). <div dir="auto"><br></div><div dir="auto">It uses letsencrypt to handle SSL certs for each site, and then forwards the traffic to the appropriate site internally.</div><div dir="auto"><br></div><div dir="auto">A note on security. This does come with a risk. You're opening a well known attack vector into your network. Be sure you keep everything updated, and institute some other security processes. Geoblocking, fail2ban, etc.</div><div dir="auto"><br></div><div dir="auto">I am on mobile now, I can give a more detailed explanation when I have a keyboard.</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Mon, Aug 3, 2026, 2:10\u202fp.m. Jon Thiele <<a href="mailto:jthiele@gmail.com">jthiele@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Looking for some advice. I manage Wordpress sites for three<br>
charities I'm involved in. Very low traffic - maybe 500 hits a month<br>
combined.<br>
<br>
The cost is starting to get a bit pricey since I pay for these sites<br>
myself. I was thinking that I could handle this using my own<br>
standalone PC. So I cloned one site and set it up on Ubuntu 26.04.<br>
Everything went well - but now I'm thinking about exactly how to set<br>
up the networking part securely. I'm on Rogers and right now and I'm<br>
forwarding ports 80 and 443 to my PC on my internal network. Is this<br>
good enough? I've used pfSense in the past and could use their port<br>
forwarding feature but not sure what the difference would be. If you<br>
run a home server, what did you do?<br>
<br>
Thanx.<br>
<br>
Jon<br>
<br>
_______________________________________________<br>
kwlug-disc mailing list<br>
To unsubscribe, send an email to <a href="mailto:kwlug-disc-leave@kwlug.org" target="_blank" rel="noreferrer">kwlug-disc-leave@kwlug.org</a><br>
with the subject "unsubscribe", or email<br>
<a href="mailto:kwlug-disc-owner@kwlug.org" target="_blank" rel="noreferrer">kwlug-disc-owner@kwlug.org</a> to contact a human being.<br>
</blockquote></div>