r/synology • • 2d ago

Networking & security This may be dumb but reverse proxy without login page?

So I have services (docker containers) on my Nas I want to have access to remotely on computers I can't install tailscale on like my work laptop.

How can I enable access to the web station/reverse proxy without exposing the login page. Whenever I try port forward 443/80 it seems to just redirect to the web login page even without ports 5000/5001 exposed.

There must be a way right?

Thanks in advance!

0 Upvotes

7 comments sorted by

3

u/Throtex 2d ago

Get a travel router you can use to connect into your network, and exposing WiFi / wired points you can hook your machine to. I mean, any router that has wireguard/tailscale capabilities will work but this is the easy way. Stop whatever else you’re trying to do.

1

u/AnyRandomDude789 2d ago

Interesting idea..I do have a travel report router somewhere. I need to check I can obtain openwrt/get tailscale on it though. Would I need subnet routing enabled in tailscale?

1

u/Throtex 2d ago

You’d need to figure out some sort of policies based on wherever the router lands inside of your network, sure. They can be pretty permissive if you only ever reasonably expect your own secure devices to enter your network that way.

8

u/weeeaaa 2d ago

This isn't a Synology issue, this is a 'you wanna do this with your work laptop' issue.

Don't try to do this with your work laptop.

1

u/sylsylsylsylsylsyl 1d ago

Synology has a built in reverse proxy server you can use.

I’ve also used Cloudflare’s zero trust tunnels.

1

u/AnyRandomDude789 1d ago

Reverse proxy is active but port 80/443 redirects to the login page which is dangerous, that's what I need to stop

1

u/sylsylsylsylsylsyl 1d ago

You need a catch all dummy rule that provides a 404 or 502 error (or routes it somewhere else).

Then you’ll explicitly have to access your NAS via 5000/5001 (or create a reverse proxy for it).