You’re probably right, but I don’t like to take risks with security. I also redirected everything to openVPN on Nethserver 7 except for SOGo and Nextcloud, and I only allowed postfix safely, blocking port 25 because I have an external well-protected mail server. I would like to do something similar on NS8 so I can sleep peacefully.
It’s unfortunate that Nethsecurity can only be run on a separate host, although I understand…
I’m interested in the method, the solution makes sense to me. Thank you, but I don’t think this would be an optimal solution.
Are you using the openVPN Road Warrior client with the openVPN Access Server?
What do you enter in the HTTP route settings to make it work for you?
I can connect to NS8 via mobile internet with Wireguard VPN, but I can’t access the applications on servername.lan/path (phpmyadmin, etc.) … Access to Firebird port (3050) works via VPN and I can also disable it in the Firebird settings so that it can only be accessed via VPN.