4 ms·
The reality is that we've let you down. Self-hosting shouldn't be any more complicated or less secure than installing an app on your phone. You shouldn't need t
by apitman 4y ago
The reality is that we've let you down. Self-hosting shouldn't be any more complicated or less secure than installing an app on your phone. You shouldn't need to understand DNS, TLS, NAT, HTTP, TCP, UDP, etc, etc. Domain names shouldn't be any more difficult to buy or use than phone numbers. Apps should be sandboxed in KVM/WHPX/HVP-accelerated virtual machines that run on Windows, Mac, and Linux and are secure-by-default. Tunneling out to the public internet should be a quick OAuth flow that lets you connect a given app to a specific subdomain, with TLS certs automatically obtained from Let's Encrypt and stored locally for end-to-end encryption.
The technology exists to do all of these things, but no one has taken the time to glue it all together in a truly good UX (I'm working on it). Pretty much every solution in this space is targeted at the developer market, not self-hosters.
So for now I'd recommend using a VPS. Your main challenge is going to be learning a lot about security. There's currently no way around that. A VPS limits the scope of damage that can be done if you get hacked. Once you've learned enough you can move to your own hardware. At that point I'd recommend setting up tunneling[0] and using either Docker or QEMU/KVM.
EDIT: I see you're already using Tailscale. That can operate as a tunnel. Basically you'd want to run a reverse proxy like Caddy (recommended) or nginx on the VPS, and point it at services running on your other devices using the IP addresses from your Tailscale network.
[0]: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling
- rambambram 4y agoInteresting projects! I bookmarked boringproxy for later reference. Just a quick comment: the feed on your homepage is nice - like a personal timeline - but it misses an RSS feed! ;)
- anderspitman 4y agoThanks. Ah yes RSS. I started working on my static site generator about 2 years ago. That's when I got distracted with the sad state of selfhosting and have been going down that rabbit hole ever since. I'll know I've reached my goal when my dad can run a blog (with RSS) on his own hardware without having to know anything other than writing and selecting photos.
- kickaha 4y agoWow. “The system fundamentally fails us AGAIN RAWR” is a hot take that I almost always go to eagerly, but I am vibing SO HARD on hitting the front page of HN (!!!?) and getting the community help glow, that for the moment I’m gonna let it go. :-) Also, thanks for all the helpful tips. At this point there is so much for me to go on that I am trying to think how I can put it all together and share it.