In addition to this. If going tailscale at least, add the pi-hole as the DNS server. Now you have pi-hole on the go as well.
Comment on Security considerations about hosting Immich from home
avidamoeba@lemmy.ca 3 weeks ago
Put it behind Tailscale/Headscale/Netbird/etc. VPN connection and don’t think about it.
Itsamelemmy@lemmy.zip 3 weeks ago
MicKet@swiss.social 3 weeks ago
@avidamoeba @Maroon
I use wireguard. But yes.
In my case there is no need to have my services public reachable.
All family member have a wireguars client on their phone rethink or wgtunnel.
That way also their internet connection goes completely through my router and also the add blocker.
thericofactor@sh.itjust.works 3 weeks ago
This. You can sync your photos when you’re connected to your home wifi or via tailscale/vpn. You can look at your photos either via vpn or at home in your own network. There is little need for opening it up to the Internet.