Comment on Self hosted Onedrive alternative

Dave@lemmy.nz ⁨1⁩ ⁨day⁩ ago

• artyom@piefed.social ⁨1⁩ ⁨day⁩ ago

  Exposing https requires a lot more configuration and also carries with it security risks.

  source

  • Dave@lemmy.nz ⁨1⁩ ⁨day⁩ ago

    I don’t think it’s really true these days that it needs a lot of config. Maybe reverse proxies will do it for you automatically without much setup.

    I am curious what the security risks are for HTTPS for a service that will already be accessible remotely?

    source

    • artyom@piefed.social ⁨5⁩ ⁨hours⁩ ago

      Maybe reverse proxies will do it for you

      Reverse proxies require configuration.

      what the security risks are for HTTPS for a service that will already be accessible remotely?

      Already accessible via VPN. Meaning it’s only accessible to those explicitly allowed to access it.

      source

      • Dave@lemmy.nz ⁨2⁩ ⁨hours⁩ ago

        What is the security risk of adding HTTPS to a site going via VPN?

        source

        • -> View More Comments
• Infernal_pizza@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

  I hadn’t considered OwnCloud because I thought it was pretty much the same as NextCloud but mainly aimed at enterprise. Does it have any advantages over Nextcloud?

  I haven’t got round to setting up https yet since I only access my server via my LAN or Tailscale. When I do get round to setting it up I might use a reverse proxy rather than configuring it for every service. I also need to work out how to do automatic certificate renewal and if that’s even worth doing, so I don’t want to be forced into half-assing it for Nextcloud before I’m ready to do it properly. With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup, using the community edition via http seems to get round that problem as well

  source

  • ragica@lemmy.ml ⁨7⁩ ⁨hours⁩ ago

    Use Caddy for reverse proxy. It’s magic. Just put in config the subdomain/domain and localhost port to point to, it will fetch and configure and keep certificates up to date with zero effort. You’ll forget certificates exist. It just works.

    source
  • MentalEdge@sopuli.xyz ⁨1⁩ ⁨day⁩ ago

    I also need to work out how to do automatic certificate renewal and if that’s even worth doing

    This is what certbot is for. For example, with nginx, you just set up the webserver to be reachable via your domain.

    You then install and run certbot, and it will aquire, install and configure, and then auto-renew a certificate. All with just one command.

    With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup

    Yes you can?

    I’ve done it thrice now.

    source

    • Infernal_pizza@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      How do you change the domain? That was one of the biggest things putting me off

      source

      • irmadlad@lemmy.world ⁨1⁩ ⁨day⁩ ago

        Locate and edit the config/config.php. There is a line that starts with ‘trusted_domains’ Add your new domain thusly:

        'trusted_domains' =>
          array (
            0 => 'old-domain.com',
            1 => 'new-domain.com',
          ),
        

        You’ll have to update your web server configuration, your DNS records, and you may have to clear any server cache you may have.

        source

        • -> View More Comments
  • Dave@lemmy.nz ⁨1⁩ ⁨day⁩ ago

    Owncloud Infinite Scale was a rewrite of the codebase to get away from PHP. In theory this should be better able to run on lower end hardware. People tend to say they use it if they are only wanting the file part and not all the apps. Personally I use Nextcloud because I want the apps.

    Automatic certificate renewal is built into many reverse proxies, and can be done for free, so I don’t see a reason not to do it.

    Nextcloud has federation of some features so I’d guess that would be a key reason you can’t change the domain (you also can’t change a Lemmy domain once set up). However, you’re using it for file sync for yourself, right? Regardless of what you pick (even Nextcloud), you could surely just set up a new instance under the new domain then move all your files over.

    source

    • Infernal_pizza@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago

      Do you have any recommendations for a reverse proxy to use or resources on how to set one up? It’s not something I’ve properly looked into yet

      source

      • motruck@lemmy.zip ⁨1⁩ ⁨day⁩ ago

        Check out caddy. Very straight forward syntax for a reverse proxy.

        source
      • Dave@lemmy.nz ⁨1⁩ ⁨day⁩ ago

        Others might have suggestions. I run everyhting in docker. I then use Traefik as the reverse proxy in docker, where you add labels to the containers you want it to handle and it works things out on it’s own. I have also configured it to do certificates automatically, including automatic domain validation using a Cloudflare API.

        Caddy and Nginx Proxy Manager are other popular ones that can configure HTTPS certificates for you.

        You don’t have to overthink it. Choose a reverse proxy you like. If it does automatic certificates, that’s great. If not, Let’s Encypt (which most of these services use for the free certificates) have a certbot program you install and run on a cronjob to renew certificates.

        source
  • dangling_cat@piefed.blahaj.zone ⁨21⁩ ⁨hours⁩ ago

    The easiest way to set up reverse proxy + auto HTTPS for a homelab is https://nginxproxymanager.com/
    There is also https://noted.lol/pangolin/, which I think is too overkill for you atm :3

    source