Selfhosted

57133 readers

653 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

Using VPS for remote access of my server - some questions (piefed.social)

submitted 14 hours ago by Tywele@piefed.social to c/selfhosted@lemmy.world

21 comments fedilink hide all child comments

Hi,

I want to make some of my services (like Nextcloud, Immich, Komga, Jellyfin and FreshRSS for example) on my home server easier accessible from remote. For that I want to use a VPS where I install Nginx and Wireguard on it and establish a VPN connection between it and my homeserver. So far so good.

My first question: For the services that I don't want to expose for remote access over that setup, can I just keep my Nginx instance that I have running now for these services. For example my budgeting service is available under finance.example.com as long as I'm in the same network as my home server right now. Would that still be possible when I have 2 Nginx instances running (one on the VPS and one on the home server directly) or would I need to configure it differently for that to work?

My second question:
Do I need to install Fail2Ban on my VPS or can I also install it on my homeserver?

you are viewing a single comment's thread
view the rest of the comments

[–] PeriodicallyPedantic@lemmy.ca 4 points 9 hours ago (1 children)

If you're getting a VPS I'd generally recommend getting pangolin. It's basically like cloudflared tunnels, but self hosted (on the vps). It works the same, you use it to map your subdomains to IPs on the other end of the secure tunnel.

It has things like user access controls for each of the subdomains, the ability connect it to an identity provider, rules governing which paths need authentication and which don't, etc.

It can optionally come preconfigured with crowedsec, but I had problems with it falsely classifying my normal traffic as an attack and banning my IPs.

Just be aware that even if your service has a login page, you first need to log into pangolin to be granted access to the service, and although that's fine on the web (especially if you're using an sso), some native apps don't like the extra login. Homeassistant handles it better now, but I haven't gotten jellyfin native android app working yet.

[–] clif@lemmy.world 1 points 9 hours ago

Second for Pangolin.

They have a cloud hosted free tier you can try but it's time/ transfer limited. If you like it, you can self host on your VPS with no subscription since it's all FOSS software.

Also, thank you for addressing the native app vs Pangolin auth layer challenge. I've been wrestling with that myself.