ssl unhosted domain

[KRONZO 20]

Hi

I'm looking for a little help i'm finding all the forum post regarding this a little overwhelming.

I would of course like to secure my emby outside my own network,

Ï have my own domain domain name but its unhosted as I only use it for email, and I have some funds on my domain registrar site to buy a ssl certificate but do i need to have a hosted domain ?

how would i go about setting up hhtps  in my situation? 

hope some one could give me some pointers  

 

Thank you in advance

[mastrmind11 722]

if you have a domain name already, just put Cloudflare in front of your server.  They offer a free cert and it's super simple to set up.  Problem is you likely have a dynamic IP from your ISP which means if it changes, everything breaks.  Of course, this is true no matter what when you're trying access your network from the outside world, so you'll have to put a dns relay like dnsomatic.com in the mix as well.  If you want to get some knowledge, just google up on "cloudflare ssl plex" and just replace the plex instructions with emby's.  Good luck!

[KRONZO 20]

Hey Masternind1

I Bought a domain name through namecheap to use with gsuite email it is not set up or hosted anywhere, so I am very unsure what you mean by just putting cloudfare in front of my server ? my home network is not connected to any domains! and i do get a static ip from my isp, hope you will take the time to elaborate  

I googled the cloudfare ssl plex didn't make much sense.

[mastrmind11 722]

as far as I know, if you own the domain name, then you can tell it what to resolve to via a CDN like Cloudflare.  

 

https://support.cloudflare.com/hc/en-us/articles/201720164-Step-2-Create-a-Cloudflare-account-and-add-a-website

 

basically you tell Cloudflare to send all traffic directed at your domain to the WAN address of your router.

[Angus Black 5]

Since you have a static IP you should be able to set up your domain with namecheap to pint to your IP.

namecheap seems to have free DNS services.

 

ie: emby.Kronzos_Domain.org could point to your.ip:8096

 

You can get free SSL certs from https://www.sslforfree.com/

 

CloudFlare will give you more protection if you feel you need it.

Edited February 23, 2019 by Angus Black

[KRONZO 20]

thank you i will have a look and see what i can put together

[harrv 90]

I bought a domain from godaddy and it includes DNS management. I use letsencrypt for free ssl cert that automatically renews. You can find tutorials on both.

 

Another useful component, but not required, is a reverse proxy. Nginx is popular, but I like traefik. It handles the automatic letsencrypt renewals, and allows me to access multiple services in my home network from outside. I set mine up so that my family can access Emby and Ombi, and I also set it up to allow me to access Sonarr and Radarr (fronted with basic authentication configured in traefik). So, for example, with one domain (let’s say it’s example.com) users can access https://example.com for Emby, https://requests.example.com for Ombi, and I can manage Sonarr and Radarr at https://sonarr.example.com and https://radarr.example.com, all with just a single domain and a reverse proxy running on my Windows PC in my home.

 

I know this is pretty technical sounding, but I wanted to give you another example of what is possible other than Cloudflare (which I know nothing about).

[Angus Black 5]

I do pretty much the same thing using ZoneEdit for my domain.

I have a dynamic IP but my router updates ZoneEdit when my IP changes.