this post was submitted on 20 Apr 2025
124 points (97.7% liked)

Selfhosted

46168 readers
410 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Shameless self-plug here. I wrote a blog post to document my methodology after having some issues with publicly available examples of using Podman and traefik in a best-practices config. Hopefully this finds the one other person that was in my shoes and helps them out. Super happy for feedback if others care to share.

you are viewing a single comment's thread
view the rest of the comments
[–] starkzarn@infosec.pub 4 points 2 days ago (1 children)

The other poster here is correct, this is just an account of my journey through self hosting traefik, and ultimately headscale, without the hurdles along the way. I tried to include a few links to unclear terms along the way in the narrative, maybe those would help you figure things out. Unfortunately I can't write for an audience of everyone, but hopefully you can still gain some value or learn some new things! Thank you for the feedback.

[–] deadcatbounce@reddthat.com 2 points 1 day ago (1 children)

Wasn't being critical at all. Not expecting you to write for anyone.

I wondered what this actually provides. If you were explaining to someone with a good knowledge of the world, not grandma!!

[–] starkzarn@infosec.pub 1 points 1 day ago (2 children)

No worries, and I'll accept criticism too, that's how you improve.

Anyway, this is effectively giving you tailscale, a remote access mesh VPN solution, but with total control and ownership of the control plane server, instead of relying on the opaque tailscale owned and controlled infra. I touched on it briefly again the 'DERP Config' section of part 2: https://roguesecurity.dev/blog/headscale-quadlet-part2#DERP%20Config

[–] deadcatbounce@reddthat.com 1 points 1 day ago* (last edited 1 day ago) (1 children)

I'm not criticising you. I cannot validity criticise you, even if I was so inclined (I'm not), because I cannot proficiently grasp the subject matter. I would like to understand, NOT criticise. You've written an engaging piece which is opaque to me; apparently a contradiction. Hopefully I've rephrased that enough times to get across that no criticism is intended. 😁

I don't know the product names. I don't tend to be focused on product names because they come and go. Your first message didn't help me.

Your last precis is just what I needed. Ideal. Thank-you. I now know what you're trying to achieve.

[–] starkzarn@infosec.pub 2 points 23 hours ago

Awesome! Thanks for the banter. It's easy to get stuck in your own echo chamber working IT every day, so it's nice to have these kinds of questions. Feel free to drop anything into comments too, maybe other readers will benefit too!