How to Use Separate IPs from IP Host for Apps?

Hi everyone,

My Truenas Scale only has 1 LAN port which that’s port has 192.168.99.212 as Host IP to access TrueNAS Scale.
Can someone explain me step by step, how to Use Separate IPs from IP Host for Apps?

This is my plan:

  • 192.168.99.212 for TrueNAS Scale Host
  • 192.168.99.211 for AdguardHome
  • 192.168.99.210 for Syncthing

Please help so that I can use the above plan, thank you in advance.

Nope.

I have several bridges setup for my vlans but how to continue to use separate IPs for the Apps?
In the old world of Core it was straight forward but in Scale I am not able to find a solution. When I past an IP-Adress within the Nextcloud Configuration under Host the whole App is not working.

If you’re using the iX apps you can’t specify separate ip’s for apps, only if you use custom apps to deploy it. There you can set separate ip’s for your apps.

1 Like

Do you know if there is any plan to change this in the future?

Since the apps get a major overhaul in the next version coming in october, i can’t tell you right now. The current apps backend is kubernetes k3s and the new version will be native docker. With docker you can assign separate ip’s to your container, but since i can’t test the next version because i dont have a test box to play around i cant answer your question.

Please explain to me how to set separate ip’s using custom apps?

I can’t i dont use custom apps, i just saw someone post on the forum that it’s possible. I’ve switched to scale sandbox with native docker and disabled the buildin apps system.

Why does it matter? Yes, jails on CORE got their own IPs. Apps on SCALE, by default, don’t. Why is this a problem?

Oh, that’s icky. I specify everything on my network; all of my jails get grouped into groups. …50-60 for this type, 77-80 for that type, 210-220 for that kind of stuff. How do you access stuff? I mean, I know plex just announces itself and your local app will find it but what about backuppc or apps like that?

It depends on the structure of the network. In my case I have different Vlan’s for Management, IoT, Guest. Therefor it can be necessary to separate also the apps to different Vlan’s.

Step 5 here:

The simple answer is, “by IP and port,” much as you do with the jails, but with everything on the same IP. But since TrueCharts apps integrate ingress with Traefik, what I actually do is use FQDN: gitea.mydomain goes there; immich.mydomain goes there, etc. In my local DNS all those names point to the NAS; Traefik handles the rest.

But you cannot do port forwarding (on your firewall) then, right?

Why couldn’t you? You’d just forward to Traefik. If you wanted to expose some apps to the Internet but not others, I expect you could configure Traefik accordingly.

Ah. Makes sense.