Comment on What else should I self-host?
madcaesar@lemmy.world 1 week agoHow safe is it to self host something that you open up to the web? I’ve been thinking about a keepass self host, but I need it to be accessible from anywhere… I’m just really worried what that does once you open up your local server to the world
KarnaSubarna@lemmy.ml 1 week ago
If you want to expose a container based service just for yourself over internet, you can -
If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].
If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].
In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default your firewall should block all incoming request.
I’m personally using Cloudflared Tunnel, but planning to migrate to Tailscale.
[1] digitalocean.com/…/how-to-set-up-wireguard-on-ubu…
[2] developers.cloudflare.com/…/connect-networks/
[3] tailscale.com