# Hardening NextCloud Pi for IP passthrough on home router

**URL:** <https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572>\
**Category:** 📦 Appliances (Docker, Snappy, VM, NCP, AIO)\
**Tags:** ncp\
**Created:** [August 28, 2022, 9:53pm UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572 "2022-08-28T21:53:36Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![ato](https://help.nextcloud.com/letter_avatar/ato/32/5_5575768a8748004e209b776fc1b2916d.png) [@ato](https://help.nextcloud.com/u/ato)\
**Post date:** [August 28, 2022, 9:53pm UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/1 "2022-08-28T21:53:36Z")

</div>

I have been using NextCloud Pi on a Pi3B for a couple of years, essentially to provide a DropBox/Google Drive for my household. Recently I had to move and change internet providers. The new AT&T fiber gateway has a port forwarding feature, but it doesn’t function (the ports don’t open despite configuring). AT&T replaced the gateway, but that did not resolve the issue, and they have no further support to provide. I’m wondering whether to consider using the IP Passthrough feature on the gateway to direct all incoming traffic to the Pi and access it that way? What settings do I need to change to go this direction?

---

<div class="post-metadata">

**Author:** ![NaXal](https://help.nextcloud.com/letter_avatar/naxal/32/5_5575768a8748004e209b776fc1b2916d.png) [@NaXal](https://help.nextcloud.com/u/NaXal)\
**Post date:** [August 29, 2022, 3:32am UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/2 "2022-08-29T03:32:49Z")

</div>

Hello,

> [@ato](#):
>
> What settings do I need to change to go this direction?

Whether it is Port Forwarding or this IP Passthrough you are mentioning, none of them are in anyway connected to or need of any special configuration in NextCloud application end.

In case you are accessing nextcloud via a different IP / Domain than your LAN, all you need to do is just add another Trusted Domain with that IP or domain value.

But actual traffic routing or such are to be done at network end, nextcloud has nothing to do with that.

Thanks.

---

<div class="post-metadata">

**Author:** ![ato](https://help.nextcloud.com/letter_avatar/ato/32/5_5575768a8748004e209b776fc1b2916d.png) [@ato](https://help.nextcloud.com/u/ato)\
**Post date:** [August 30, 2022, 1:51am UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/3 "2022-08-30T01:51:29Z")

</div>

Thanks—I’m asking specifically about security settings and configuration. I know NextCloud Pi tries to have reasonably secure defaults, and I have turned on settings such as forcing HTTPS, but am not sure what else I might need to ensure that the Pi and my home network are secure.

---

<div class="post-metadata">

**Author:** ![devnull](https://help.nextcloud.com/user_avatar/help.nextcloud.com/devnull/32/27793_2.png) [@devnull](https://help.nextcloud.com/u/devnull)\
**Post date:** [August 30, 2022, 6:29am UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/4 "2022-08-30T06:29:44Z")

</div>

I only read [this about IP Passthrough feature at&t (PDF)](https://www.att.com/ecms/dam/att/business/help/pdf/att-bridged-mode-vs-ip-passthrough-nov2012-v3.pdf) and i think it is not a good option. I think in this settings you must configure your Pi also as router/bridge/NAT, … for your whole network. That makes no sense and i think it is only interesting for business.

Please post more details to the AT & T fiber gateway port forwarding feature. Post screenshots of your router, …

---

<div class="post-metadata">

**Author:** ![ZendaiOwl](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zendaiowl/32/77706_2.png) [@ZendaiOwl](https://help.nextcloud.com/u/ZendaiOwl)\
**Post date:** [August 30, 2022, 10:46am UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/5 "2022-08-30T10:46:32Z")

</div>

Have you seen this article?

> [@Hardening NextcloudPi - Security Suggestions](https://help.nextcloud.com/t/hardening-nextcloudpi-security-suggestions/126071):
>
> This is not a perfect formula by any means, but suggestions follow. The best security is to never put sensitive data online. " We have an illusion of security, we don’t have security, but we can still have best practices. " Please consider helping out to expand these sections, you can contact the wiki team at [Matrix](https://matrix.to/#/#nextcloudpi:matrix.org) or [Telegram](https://t.me/NCP_Wiki_Team.) These steps are merely a couple of good measures to take if you intend to expose your NextcloudPi instance to the internet, …

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 13, 2024, 2:39pm UTC](https://help.nextcloud.com/t/hardening-nextcloud-pi-for-ip-passthrough-on-home-router/144572/6 "2024-12-13T14:39:34Z")

</div>


