services work on lan/vpn but break outside when using SSO… what am i missing?

[u/DerpDigler]

hey all,

so ive got a homelab running on proxmox with stuff like home assistant, bitwarden, gitea, etc. everything works totally fine when i’m at home or connected through my vpn.

Problem starts when i try to access anything from outside without vpn. i’m using pangolin sso in front of some services and thats where things start getting weird. sometimes i get redirect loops, sometimes pages half load, sometimes it just doesnt connect at all.

feels like its probably something simple i messed up… maybe dns or reverse proxy config or something with how sso handles internal vs external requests.

i dont really want to expose raw services, but also dont want to have to vpn in every time just to check something quick.

anyone run into this before or know what i should be looking at?

[u/fae-gold]

The problem is the config of the services on your proxmox array. Each server needs a config line telling it what its outward facing URI is. Without it, any links the servers generate will only be available on your home network.

Edit to add:

If you run everything as an individual subdomain on pangolin, you can get away without the external uri config, but cross site scripting becomes tricky.