this post was submitted on 27 Jan 2025
442 points (98.5% liked)

Selfhosted

41554 readers
613 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I'm securing Immich using OAuth.

I don't have very nerdy friends so not many people appreciate this.

you are viewing a single comment's thread
view the rest of the comments
[–] valkyre09@lemmy.world 8 points 2 days ago* (last edited 2 days ago) (3 children)

I don’t even bother with the internal DNS server. I just set my A records in Cloudflare to point to the private IPs

[–] lorentz@feddit.it 6 points 2 days ago

I tired the same, but my router wants to be smart by filtering DNS responses that points to local IP. I guess whoever designed it considered it a security feature. It is a stock router from the ISP, its configuration interface is minimal, borderline to non existent.

[–] lka1988@lemmy.dbzer0.com 2 points 2 days ago

Sounds like Cloudflare tunnels. I used that for a while, until I realized I didn't want to be tied to Cloudflare.

[–] stetech@lemmy.world 4 points 2 days ago (3 children)

Do the private IPs not change at all? Or can you handle that automatically?

I have next to no experience, but I’m pretty sure that wouldn’t work for me since my IP changes? Idk

[–] WolfLink@sh.itjust.works 2 points 1 day ago

Most routers have a feature to assign static IPs to a specific MAC address. You can also tell most devices to try to take a specific IP instead of using DHCP.

There are multiple ways to set it up, but it’s very possible to set a specific device to always have the same local IP, which is usually the first step to many self-hosting scenarios.

[–] valkyre09@lemmy.world 4 points 2 days ago (1 children)

You can either set a DHCP reservation in your router, or manually set the IP on the device.

When I say private IP, I’m referring to the internal IP e.g 192.168.1.X

Means internally I just go to the domain without having to remember the IP I set.

[–] stetech@lemmy.world 1 points 2 days ago* (last edited 2 days ago)

Oooh. That makes more sense, thank you.

I somehow thought you’d meant your global IP addresses, lol

[–] starshipwinepineapple@programming.dev 2 points 2 days ago* (last edited 2 days ago)

Edit: i see now they're talking about private IP, but in case you want to learn about getting a static IP for other things...

Many ISPs will give you a dynamic (changing) IP rather than a static (unchanging) IP. Just check your IP once a week for a few weeks to see if it changes.

There are some services that get around this by checking your ip regularly and updating their records automatically. This is called a dynamic DNS provider (DDNS). I used to use "noip" but since then there are quite a few like cloudflare DDNS.

Beyond that you just would want to make sure your router or whatever device is assigning IPs on your network to give a static assignment to the server. Assigning IPs is handled by a DHCP server and it would usually be your router, but if you have a pihole you might be using that as a DHCP server instead.

Between DDNS and DHCP you can make sure both your external IP and internal IP are static.