Cloudron 9 - VPN In/Out for Containerized Apps

[robi]

Inspired by the Invidious companion thread, this thread serves as the point of architectural discussion for Cloudron 9.x .

I asked if will Cloudron 9 have the ability to VPN out from a container and have apps appear to come from a different IP?

For the experimenters, let's say getting Cloudflare WARP (VPN accelerator) working for an app such as Invidious (mainly to help make Invidious work as Google/Youtube may block certain VPS IPs over time).

In the past we've discussed a way to get VPN access into an App container and now that we have Wireguard functional in the VPN App we can leverage that for specific containers for both ingress and egress.

Having more functionality for internal network routing is a welcome enhancement for the community from multi-year requests in various use cases.

[malvim]

VPN as an external addon like databases and the like would be sweet. I've managed to have a proxy app to an internal (homelab) service by manually installing wireguard on the cloudron server, and routing just worked.

I'm not using it like this anymore, since cloudron doesn't support maintaining external tools on the server, but I think an addon might solve this.

[robi]

@malvim Thanks for the feedback, did you use the Cloudron Proxy App from the App Store?

Another common use case is making local apps and services available at a domain:port via tools such as ngrok, Localtunnel, or many others. This would be a good use case especially since Cloudron can programmatically instantiate new subdomains.

[malvim]

Yeah, I did. I installed wireguard manually and my homelab computer was a peer. Used the proxy app from the App Store to point to its wireguard IP, and it worked well.