Reverse proxy + Let's Encrypt automation for all *.codycodez.com services. jc21/nginx-proxy-manager:latest.
| Guest | LXC 106 "Nginx-Proxy" on M910q |
| IP | 192.168.86.201 |
| Tailscale | nginx-proxy / 100.75.45.119 |
| Resources | 1 vCPU / 512 MB |
| Rootfs | 15G ceph-storage |
| Port | Purpose |
|---|---|
| 80 / 443 | proxy entry (HTTP→HTTPS, LE challenges) |
| 81 | admin UI |
frigate, auth, project, jellyfin, immich, n8n, homepage, odysseus, blog, storj (.codycodez.com) — full mapping in DNS Records. At least two hosts include the Authentik outpost forward-auth snippet (/outpost.goauthentik.io → 192.168.86.213:9443).
/opt/nginx-proxy-manager/docker-compose.yml; app data ./data (SQLite config DB + generated nginx conf), certs ./letsencryptcd /opt/nginx-proxy-manager && docker compose pull && docker compose up -d && docker image prune -f
Kuma: NPM - Ping / Admin (:81 keyword) / Tailscale.
This is the single choke point for every public name — HA candidate #1. If it's down, all codycodez.com services are down (LAN IPs still work).