Help me understand a little better please

[Node815]

For Nebula, do you have to open a port for the Lighthouse or Relay in your firewall?
As I understand, you need a Lighthouse to act as your director (reverse proxy?) or is it relay? Or maybe both?

What my endgame is, would be to connect my vanity domain to use it and have precisely 3 services publicly exposed (IDP, Home Assistant and a Vaultwarden)

[johnmaguire]

Hi @Node815 - a Lighthouse acts sort of like a directory for your other nodes, informing nodeA how it can find nodeB. A relay can relay traffic between two nodes that can't communicate directly, for whatever reason. You may use your Lighthouse as a relay by setting am_relay: true and listing it in the relay.relays section of your nodes.

Lighthouses require a static, port opened in your firewall, so that nodes are able to connect to it directly. It is recommended that you also use a static IP, however you can define them in your config using DNS names.

It is also advisable that your relay also has a static, open port in your firewall to ensure all of your nodes can access it.

[Node815]

Thanks, I will pass then - I don't want to have any open ports. Just a personal policy of mine.