Matrix Ansible Playbook - Fronting Integrated Reverse Proxy with Boring Proxy

Hey @c2oxide, sorry for the super late response. Busy summer so far!

Unfortunately I’m not really familiar with Ansible or Matrix. Only dabbled with each. One thing to be aware of is that boringproxy multiplexes incoming requests over a single TCP connection (through SSH) for each tunnel. Throughput is generally good, but in use cases with many incoming connections, you may end up with head-of-line blocking issues. See this post.

You might have better luck with a more advanced tool like frp which supports tunneling over QUIC which would sidestep this. Or if you don’t mind using hosted services, Cloudflare Tunnel is really good and free and also supports QUIC.