Pro-Tip: You can reverse proxy any service on your network but if the IP of your server does not match the IP of your A record the public will not be able to access your server.
Http/s is neat that way, if the IP’s don’t match then it’s technically considered an insecure or misconfigured setup but it works great to prevent unauthorized access to one’s server.
WhyJiffie@sh.itjust.works 4 months ago
you start with authenticated things, like forgejo and such, and always double check that anonymous visitors don’t see any data.
but generally it’s also not wise to just expose most services to the internet. jellyfin for example had lots of leaks because lots of API functionality was accessible without authentication. I don’t know if it’s been fully fixed.
with copyparty there’s an added risk. if police finds you hosted child porn, they won’t care if it wasn’t you who uploaded it. someone reports it to them, they steal all your computers, worst case you can even end up in jail.