6 ms·

I remember home hosting fondly too. Every so often I think about doing it again, but security paranoia keeps me from it. What if they broke out somehow? I coul

by ghusto 4y ago

I remember home hosting fondly too. Every so often I think about doing it again, but security paranoia keeps me from it. What if they broke out somehow? I could DMZ it I guess.

bombcar 4y ago
DMZ or second IP/connection is the way to go. It can be a bit tricky with hairpin routing, but you can make the DMZ seem to be "on the internet" even to the home network. Use tail scale or something similar for actual "access my home network from far away"
teekert 4y ago
Tailscale is nice, you don't even need to open any ports to have your device accessible from anywhere. Works really great, literally (!) takes >10 min to set up (on mobile, dl app, log in with 3rd party identity provider (I choose GitHub), on Server, curl some script (will move to apt or yay or dnf when it detects them), click a link, boom both devices can find each other on unique IP addresses.) I do open ports, for NextCloud (to be able share stuff) and some websites. But Home Assistant is only accessible from the Tailnet for example, as are my ssh servers.
- 14u2c 4y ago
  Cloudflare has a similar (free) service as well. It's quite useful.
- ghusto 4y ago
  Excellent, thanks. I've never used Tailscale before.
  - teekert 4y ago
    It's free for the first 20 devices, I guess there is no limit if you want to selfhost the server part (called headscale). They are committed to the free tier though, they wrote a lot about that. I like the company a lot, I hope they don't change. They are very freedom/opensource oriented, for now :) Once you use Tailscale you realize this is how a VPN should be, it's really something.
anderspitman 4y ago
I'd recommend running your selfhosted stuff in a VM (or docker) and using tunneling[0] to access it. [0]: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling

6 ms·

I remember home hosting fondly too. Every so often I think about doing it again, but security paranoia keeps me from it. What if they broke out somehow? I coul

by ghusto 4y ago

I remember home hosting fondly too. Every so often I think about doing it again, but security paranoia keeps me from it. What if they broke out somehow? I could DMZ it I guess.

bombcar 4y ago
DMZ or second IP/connection is the way to go. It can be a bit tricky with hairpin routing, but you can make the DMZ seem to be "on the internet" even to the home network. Use tail scale or something similar for actual "access my home network from far away"
teekert 4y ago
Tailscale is nice, you don't even need to open any ports to have your device accessible from anywhere. Works really great, literally (!) takes >10 min to set up (on mobile, dl app, log in with 3rd party identity provider (I choose GitHub), on Server, curl some script (will move to apt or yay or dnf when it detects them), click a link, boom both devices can find each other on unique IP addresses.) I do open ports, for NextCloud (to be able share stuff) and some websites. But Home Assistant is only accessible from the Tailnet for example, as are my ssh servers.
- 14u2c 4y ago
  Cloudflare has a similar (free) service as well. It's quite useful.
- ghusto 4y ago
  Excellent, thanks. I've never used Tailscale before.
  - teekert 4y ago
    It's free for the first 20 devices, I guess there is no limit if you want to selfhost the server part (called headscale). They are committed to the free tier though, they wrote a lot about that. I like the company a lot, I hope they don't change. They are very freedom/opensource oriented, for now :) Once you use Tailscale you realize this is how a VPN should be, it's really something.
anderspitman 4y ago
I'd recommend running your selfhosted stuff in a VM (or docker) and using tunneling[0] to access it. [0]: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling