I currently host several services on my docker swarm, all of which are exposed to the internet but protected by Authelia and routed through Traefik.
I'd like to improve security and split my network into several vlans, one of which would be a DMZ for services exposed to the internet (Foundry VTT, Matrix, Searx, maybe some others), and another vlan for services that are only accessible while on a vpn (*arrs, Jellyfin, Nextcloud, etc.).
I'm not sure what is the safest and easiest way to do this. Some ideas I have:
Thanks, and I appreciate the help.
@grilledcheesecowboy
@kbin.social