this post was submitted on 15 Apr 2026
55 points (85.7% liked)

Selfhosted

58622 readers
476 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

It’s a 10 minute read when it should probably be a 2 minute read, likely due to LLMs fluffing it up (I got that vibe from skimming it). But what do you all think, is there anything in here that would compel you to switch from your current VPN solution to this?

you are viewing a single comment's thread
view the rest of the comments
[–] hertg@infosec.pub 4 points 4 days ago (3 children)

CGNAT and changing IPs make this harder. What I'd consider in this scenario is renting a small vps at a local provider (a tiny/cheap machine is enough). Then use this one as a hop to your network, basically homelab->vps<-client. Here is a post that talks about something like that: https://taggart-tech.com/wireguard/

I haven't used this method personally, but I've done something similar for incoming web traffic before, when you want to host things behind a CGNAT. You can actually keep all the traffic confidential by having just an L4 proxy on the vps, then the http traffic is still end-to-end encrypted between the client and the service, so you don't even have to trust the vps provider when it comes to them snooping. They still get some metadata, but not significntly more than the ISPs.

[–] uzay@infosec.pub 1 points 3 days ago (1 children)

I have done basically that before and it worked. But I find Tailscale with a headscale server easier to manage. Maybe I'll take a look into selfhosting netbird at some point too.

[–] hertg@infosec.pub 2 points 3 days ago

Whatever works for you, and as long as you have an out, that's great. I've just become wary of single-vendor opensource projects to the point where I basically treat them like proprietary software. So far that's worked, but it requires some restraint from using new shiny things

[–] freebee@sh.itjust.works 3 points 4 days ago

But Tailscale is free, works very easily and reliable and it is set up in minutes. I will only be motivated to look into all that when tailscale isn't free and reliable anymore... I guess that will eventually happen at sometime in the future.

[–] wltr@discuss.tchncs.de 1 points 4 days ago* (last edited 4 days ago)

Thanks. It’s still much more work than I’d ~~like~~ can afford to have at the moment, so I’d stay with what I have for a while. But I have an obsolete Intel Atom machine as a server at work. It’s my personal web and file server, plus Syncthing node. The sysadmin thinks that’s for our website to work. (It’s not used for that at the moment.) I can emulate some for-work things if/when needed, but at this point nobody cares.

Nobody else, including the boss is aware. But I don’t do anything sketchy there. Just a separate offsite node, plus they have some decent power backup system. We did have massive blackouts in winter (I live in Ukraine), and not a single time the server went offline! Bonus thing, they have a static IP.

I’m hesitant to move to something bigger there though, as the future of me with the company is not very clear. I can get a higher position at some point and also replace the sysadmin (he plans to retire at some point). If so, I may move the entire company to completely self-hosted everything. And add a couple of servers to myself. But if not, I don’t know. Perhaps I could use that server till it would die its natural death, even if I’d part with the company. I’d still visit them sometimes.

I wonder whether that’s much better than a cheap VPS. Power wise, I guess it’s the same, it’s really underpowered, two cores, a gigabyte or two of ram, nothing fancy at all.