Welcome to another Uncast video. Today we are diving into November’s spotlighted app: *SWAG* (Secure Web Application Gateway) by the amazing team at LinuxServer.io.
https://www.linuxserver.io/donateIf you are coming from Nginx Proxy Manager, SWAG might look different because it lacks a GUI, but it offers incredible advantages: full access to NGINX, native DNS validation for wildcard SSL certificates, and most importantly, built-in Fail-to-Ban for superior security.
In this full walkthrough, we go from start to finish: We’ll cover the prerequisites (checking for Carrier Grade NAT), basic networking, and setting up your first proxy. Then, we move to advanced topics like using Tailscale for private services (bypassing port forwarding entirely) and setting up Upstream Failover for high availability.
Whether you are a beginner or a power user, this guide has you covered!
*Key Topics Covered*
⚫ Pre-installation Checks: How to identify CGNAT or Double NAT.
⚫ Networking: MacVlan vs. IPvlan and creating custom Docker bridges.
⚫ Security: Setting up Wildcard Certs via Cloudflare & Fail-to-Ban.
⚫ Advanced Access: Using Tailscale for private apps like Vaultwarden.
⚫ Failover: specific configurations to switch servers if one goes down.
*Timestamps*
0:00 What is SWAG & Why use it over Nginx Proxy Manager?
2:45 CRITICAL: Checking for Carrier Grade NAT (CGNAT) & Double NAT
6:27 Unraid Networking: MacVlan vs IPvlan explained
11:46 Creating a User-Defined Docker Bridge
12:20 Installing SWAG & Configuring Cloudflare DNS Validation
22:11 Router Port Forwarding Guide (443 to 1443)
25:27 Dynamic vs. Static IPs & Setting up DuckDNS
29:39 Proxying your first container (Jellyfin)
33:02 Proxying containers on different networks (IP Method)
34:05 ADVANCED: Private HTTPS access with Tailscale (No Port Forwarding)
38:29 ADVANCED: Upstream Failover Configuration
What will you build with Unraid?
Get Started with Unraid in 15 minutes or less:
https://unraid.net/getting-started