Selfhosted

56229 readers

1063 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

How to Use Local IP for Services when at Home? (mander.xyz)

submitted 11 hours ago* (last edited 6 hours ago) by mrh@mander.xyz to c/selfhosted@lemmy.world

32 comments fedilink hide all child comments

So I have some services and wireguard running locally on a "home" network. I also have wireguard, a DNS resolver, and a reverse proxy set up on a remote server. Since I don't want to expose the home IP to the public, to access my services I connect to the VPN on the remote, which then forwards my request home. But this means that when I'm at home, connecting to my local services requires going out to the remote. Is there some way to have the traffic go over the switch when at home, but go over wireguard when away, without having to manually switch the VPN on/off?

I could move the DNS resolver (which handles the internal names for the services) from the remote to the home server. But then similarly every DNS request will need to go through both the remote and home servers, doubling the hops. I'd like to use my own DNS server at all times though, both at and away from home. Which tradeoff seems better?

edit: thanks for all the suggestions, I'll look into some of these solutions and see what works best

you are viewing a single comment's thread
view the rest of the comments

[–] motruck@lemmy.zip 1 points 5 hours ago (1 children)

Your home router knows nothing about your wireguard VPN unless it is also configured to be a peer in it. So in short no it will not recognize and route your connection locally unfortunately.

Are you using TLS here at all? Can you give me an example of how you access this on your phone when remote vs when local.

e. g. From my phone on cellular I go to Firefox and type in jelly.bob.com which resolves to my wireguard ip hitting the VM in the cloud that then using nginx as a reverse proxy to reach jellyfin over my network.

Remote network: jellyfin.bob.com Phone - > VM - > Home Server where Jellyfin is running

Is each hop is over wireguard i.e from phone to VM from VM to Home Server?

On the local network: jellyfin.bob.com Currently looks the same as the above and what youx like it to do with the same name is go: Phone->Home server

Even when wireguard is on, correct?

[–] mrh@mander.xyz 1 points 5 hours ago* (last edited 5 hours ago) (1 children)

Yes your description is just right and is the heart of my question. To use your terminology:

Currently:

Away from home: Phone -> VM -> Home Server
At home: Phone -> VM -> Home Server (inefficient!)

Ideally:

Away from home: Phone -> VM -> Home Server
At home: Phone -> Home Server

In the ideal case, I would never have to change anything about the wireguard config/status on the Phone, nor would I have to change the domain name used to reach the resource on the Home Server.

[–] motruck@lemmy.zip 1 points 3 hours ago

Are you routing DNS over wireguard the whole time or do the DNS servers change when you go from public internet to your home network?

If you are using the same DNS servers i.e. always using DNS over wireguard then there isn't really a lot you can do.

The way I do this is when I am on my home network I use the DNS on that network, i.e. the adguard instance I set up and also override DNS names with, when I am on some public internet i.e. via cellular, I use whatever DNS server they have. So on home network jellyfin.bob.com returns 192.168.8.3 (for example) and on the public internet jellyfin.bob.com will return 68.32.23.11 (i.e. my public IP address).

However that requires multiple DNS servers.

What is an example server where you'd like to do this (it may give us more options) and how is your DNS set up?