# Security

## Nextcloud on a Raspberry Pi, Fronted by a Tiny VPS — Nginx Reverse Proxy, Trusted Proxies, and Basic Auth for Jellyfin

I didn’t “move Nextcloud to the cloud”. I moved the front door to a VPS… and kept the house on my Raspberry Pi. 😄 This post documents the setup I ended up with: A public VPS (host: funbox) running Nginx + Let’s Encrypt A private Raspberry Pi (host: iot-hub) running Docker services (Nextcloud, Jellyfin, …) A private backhaul using Tailscale (the 100.x.y.z network) A correct Nextcloud reverse-proxy configuration (trusted_domains, trusted_proxies, and overwrite values) A pragmatic security layer for media: Basic Auth at Nginx for Jellyfin (in addition to Jellyfin’s own login) I’m writing this as a “future me” note and a “copy-paste friendly” guide. ...

RSS · Visitors this week: —