4 ms·
* Buy a domain as Domain * Buy a Asustor AS5304T as NAS * Setup CloudFlare on Domain * Setup services as docker containers on NAS * Setup CloudFlare tunnel
by moritonal 4y ago
* Buy a domain as Domain
* Buy a Asustor AS5304T as NAS
* Setup CloudFlare on Domain
* Setup services as docker containers on NAS
* Setup CloudFlare tunnel into NAS docker services with auth in CloudFlare
* Enjoy services.
Note, if any of that sounds hard I must kindly point out that you're playing a risky game trying to do all this yourself securely and should evaluate whether it's easier to just pay a service for all this.
- kickaha 4y ago> Note, if any of that sounds hard I must kindly point out that you're playing a risky game trying to do all this yourself securely and should evaluate whether it's easier to just pay a service for all this. You articulated something I couldn't: an important goal for me is to know enough to be able to evaluate such risks and decide which things to hobbyist tinker and which things to pay to outsource.
- moritonal 4y agoMy Dad once showed me how the moment he opened a port on our domestic router four different attempts to hack us were made. Good lesson for living on the net, here be dragons.
- fud101 4y agoCan you explain your second last star?
- throwaway41597 4y agoI think he means that you don't point your domain's public DNS records straight to your home IP (where your NAS sits), but rather via Cloudflare. If so, doesn't Cloudflare do HTTPS termination? Meaning that all your photos would be visible to them during transit.
- moritonal 4y agoI plan to write a blog about this. But the gist is that CloudFlare lets you host a service locally which creates a port tunnel between a domain on their platform and your box. This handles a lot of things, such as 2-factor auth, floating-IPs and TLS. So you visit "home-git.example.com" and CloudFlares routes that to your homebox.