Services:Current Services
This document provides a detailed inventory of all services currently configured on the reverse proxy system.
Service Summary
| Service | Subdomain | Internal Port | Protocol | Status | SSL |
| Wiki | wiki.jb-vpn.uk | 8010 | HTTP | Active | ✅ |
| Werbs-Wiki | werbs-wiki.jb-vpn.uk | 8011 | HTTP | Active | ✅ |
| Synology DSM | dsm.jb-vpn.uk | 5001 | HTTPS | Active | ✅ |
| Plex Media Server | plex.jb-vpn.uk | 32400 | HTTP | Active | ✅ |
| VPS Default | vps.jb-vpn.uk | - | - | Active | ✅ |
Service Details
1. Wiki Service
Subdomain: wiki.jb-vpn.uk
Public Access: https://wiki.jb-vpn.uk
Internal Configuration:
- Host: VPS (Docker)
- Target:
127.0.0.1:8010(containerwiki-mediawiki)
- Stack:
/var/www/wiki.jb/
- Protocol: HTTP
Reverse Proxy:
- Caddy:
/etc/caddy/Caddyfile(wiki.jb-vpn.uk→127.0.0.1:8010)
Traffic Flow:
External Request → wiki.jb-vpn.uk:443 (HTTPS) → Caddy (SSL termination) → 127.0.0.1:8010 (MediaWiki Docker on VPS)
Test Command:
curl -I https://wiki.jb-vpn.uk
2. Werbs-Wiki Service
Subdomain: werbs-wiki.jb-vpn.uk
Public Access: https://werbs-wiki.jb-vpn.uk
Internal Configuration:
- Host: VPS (Docker)
- Target:
127.0.0.1:8011(containerwiki-werbs-mediawiki)
- Stack:
/var/www/wiki.jb/
- Protocol: HTTP
Reverse Proxy:
- Caddy:
/etc/caddy/Caddyfile(werbs-wiki.jb-vpn.uk→127.0.0.1:8011)
Test Command:
curl -I https://werbs-wiki.jb-vpn.uk
3. Synology DSM
Subdomain: dsm.jb-vpn.uk
Public Access: https://dsm.jb-vpn.uk
Internal Configuration:
- Target IP:
10.8.0.2(Synology NAS via VPN)
- Target Port:
5001
- Protocol: HTTPS
Reverse Proxy:
- Caddy:
/etc/caddy/Caddyfile(dsm.jb-vpn.uk→https://10.8.0.2:5001)
Traffic Flow:
External Request → dsm.jb-vpn.uk:443 (HTTPS) → Caddy (SSL termination) → 10.8.0.2:5001 (HTTPS on NAS via VPN)
Test Command:
curl -I https://dsm.jb-vpn.uk
4. Plex Media Server
Subdomain: plex.jb-vpn.uk
Public Access: https://plex.jb-vpn.uk
Internal Configuration:
- Target IP:
10.8.0.2(Synology NAS via VPN, hostnameStrawberryNAS)
- Target Port:
32400
- Protocol: HTTP (TLS terminated by Caddy)
Reverse Proxy:
- Caddy:
/etc/caddy/Caddyfile(plex.jb-vpn.uk→http://10.8.0.2:32400)
- Canonical repo copy:
app.jb/docs/caddy/Caddyfile
Traffic Flow:
External Request → plex.jb-vpn.uk:443 (HTTPS) → Caddy (SSL termination) → 10.8.0.2:32400 (HTTP on NAS via VPN)
Configuration Details:
- HTTP to HTTPS redirect: ✅ Enabled
- WebSocket upgrade headers: ✅ Enabled (for playback)
- Forwarded headers:
Host,X-Real-IP,X-Forwarded-For,X-Forwarded-Proto,X-Forwarded-Host,X-Forwarded-Port
- Internal
Locationheader rewrites: ✅10.8.0.2,192.168.1.21,strawberrynas→https://plex.jb-vpn.uk
- Do not use
header_up X-Plex-*in Caddy — see Troubleshooting:Plex Troubleshooting
Synology Plex settings (Settings → Network):
- Custom server access URLs:
https://plex.jb-vpn.uk:443only (no VPN/LAN URLs)
- LAN Networks:
192.168.1.0/255.255.255.0,10.8.0.0/255.255.255.0
- Remote Access "not available": Expected — remote access uses the reverse proxy, not port 32400 forwarding
DNS Record: plex.jb-vpn.uk → 87.106.61.62
Test Commands:
curl -s https://plex.jb-vpn.uk/identity curl -I https://plex.jb-vpn.uk/web ping -c 2 10.8.0.2
5. VPS Default Web Directory
Subdomain: vps.jb-vpn.uk
Public Access: https://vps.jb-vpn.uk
Internal Configuration:
- Type: Static files
- Web Root:
/var/www/html
Reverse Proxy:
- Caddy:
file_serverfor/var/www/html
Test Command:
curl -I https://vps.jb-vpn.uk
Additional Services (Non-Web)
SSH Port Forwarding
Current Forwards:
- Synology NAS: Port
22222→10.8.0.2:22
* Access: ssh -p 22222 user@87.106.61.62
Management:
sudo /usr/local/bin/ssh-port-forward-manager.sh list
Configuration File: /etc/ssh-port-forwards.conf
Service Status Monitoring
# Test all HTTPS services
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
echo "Testing $domain..."
curl -I -s "https://$domain" | head -1
done
# Caddy
systemctl status caddy
caddy validate --config /etc/caddy/Caddyfile
# VPN (required for DSM/Plex)
cat /var/log/openvpn-status.log
ping -c 2 10.8.0.2