Accessing on Local Area Network

Small development teams often need to access each other's services on the local area network. Most of the services provided by ServBay can be accessed through the local area network, while a few require some configuration.

Prerequisites

If the user's system has a firewall enabled, they need to open the ports required for external services in the firewall settings and configure the ACL properly.

Website

The website configured through ServBay allows local area network access by default. However, on the visitor's system, the DNS for the domain name needs to be configured. Additionally, if SSL is enabled, visitors need to install the root certificate.

Here’s an example:

• Website Domain: servbay.lan
• IP: 10.0.0.3
• DNS Server: 10.0.0.2

Configuring Domain Name Resolution

On the DNS server, configure an A record for servbay.lan that points to the IP address 10.0.0.3.

If there is no standalone DNS server on the local area network and it uses a router like OpenWRT, then the corresponding record needs to be configured in OpenWRT.

Distributing the SSL Root Certificate

Since ServBay provides PKI capabilities and users have their own independent root certificates, it is necessary to distribute the corresponding root certificate to visitors.

For detailed steps, please refer to the section Certificate Export in How to Apply for and Use SSL Domain Name Certificate.

Database

MySQL/MariaDB

The default listening IP for MySQL and MariaDB is 0.0.0.0, allowing local area network access. However, MySQL/MariaDB has an authentication mechanism, and users need to create accounts with the appropriate access permissions.

For example, if there is a MySQL user servbay, the following accounts and permissions need to be created:

• Only allow local access: [email protected] or servbay@localhost
• Allow access from a specific IP in the local area network: [email protected] or servbay@mac-name
• Allow access from all IPs: servbay@%

Redis

Redis does not allow local area network access by default and only listens on 127.0.0.1. If users need to open Redis access externally, they must set a password!

Memcached

Since Memcached currently cannot set a password, we do not recommend opening Memcached access on the local area network.