Internet —> (-1) Proxy (Internet) 1-1 -------------------------1-1 Home --> (1-) Servers
Basically I have a small server on the Internet, where I can connect and then that server will call the local home server. I think this way I dont need to open any ports at home and I can use the Fix IP to set up SSL and all other interfaces. I am not sure if anyone has done anything like that, or even if it is a good idea.
One option would be to set up a dedicated VPN from Internet proxy server to home (vpn) server. I am not sure if there are other ways. Any advice?
I want to have a dedicated IP / Domain without exposing my home IP.
I know for HA I can use (and I am currently using) Home Assistant Cloud; however, I should be able to use it for more servers (i.e. Plex. IoIT,. etc).
I found different posts about VPS with reverse proxy or VPN to home server. I don’t think having a dedicated VPN between a VPS and a Home router is the best way go to because I would be opening the whole home network to the VPS. (I would restricted with a Vlan).
So a reserve proxy might be the way to go by limiting the ports opened from the VPS. I still need to check how to allow connections only from the VPS Fixed IP. (My router does not seem to have this).
I am just wondering if anyone has any advise on this.
Hiding your IP for your domain (incoming traffic) is more obscurity than security. Unless for some reason you want to mask your geolocation.
Using VPS seem a bit over the top just to expose a few services online. Look into a CDN service like Cloudflare (I think they have a free package) or Akamai (more on the enterprise side). They both have reverse proxy that will mask your IP. Cloudflare also supports dynamic IP if your home IP is not static.