TODO

Wildcard ssl certificate with dns challenge https://github.com/BackBenchDevs/certbot-dns-hostinger
Create a routing peer as a docker container with netbird client
Make traefik dashboard available

Dockerize every service To make service privately available - make the container accessible via netbird Network Route - add routing rules on docker host - manage ACL in netbird to grant access to selected machines/users To make service publicly available - if it's already on server, than add traefik router to route https connections (no need for netbird encryption or forwarding) - if not on server or want additional auth, than use a netbird proxy

Subdomain diagram:

p2net.cloud - public, main suffix bird.p2net.cloud - public, netbird dashboard .bird.p2net.cloud - wg private, netbird peers .mesh.p2net.cloud - wg private, custom netbird dns zone, distributed to peers .proxy.p2net.cloud - public, netbird reverse proxy, custom domains, automatic ssl certs .home.p2net.cloud - private local dns, resolve to ips in home network

Subnet masks:

100.80.0.0/16 - Kyivstar ISP CGNat (last ip was 100.80.17.78)
100.66.0.0/16 - Netbird peers
172.30.0.0/24 - Docker network on the server
192.168.50.0/8 - Home network