I have a NAS running immich for my photos. My ISP only gives me DS-Lite, so I cannot really use a VPN. Tailscale would be an option, but for now I want to expose immich via my domain domain.de.
So, I setup a free cloudflare plan:
- My domain it booked at https://www.strato.de/; I changed the NS entries accordingly.
- Unfortunately, it seems like I cannot enable DNSSEC. Its some kind of additional payed service and I am not yet sure about its compatibility.
- On cloudflare, I used zero trust => network => tunnels and added a tunnel via
cloudflared. - The tunnel conntects
subdomain.domain.deas a public hostname withhttp://192.x.x.x:immich_port. So it’s only http and not https?
Access to subdomain.domain.de is via https. But which part is unencrypted? Is the connection to my nas via the cloudflare tunnel secure and only the connection from the cloudflared container to the immich container is unencrypted and via http?
As I expose my nas to the internet with this: What are the things to obey? Is there some safe and trustful site to test the security?
Thanks in advance!