Dynamic IP - Self hosting

Submitted ⁨⁨3⁩ ⁨months⁩ ago⁩ by ⁨abeorch@lemmy.ml⁩ to ⁨selfhosted@lemmy.world⁩

Im sure this has been asked before i juat can’t find where it has been - Maybe need to work on how to search Lemmy better. But…

Id like to eventually self host some sevices that require external access. While I have IpV6 addresses my IPV4 is dynamic.

Whats the best free way to be able to point some domains/ subdomains I have to my external dynamic IP and keep it updated. Im running OpenWrt on my router. - So possibly should be posting there.

Free Dyndns services seem to be a bit crap. Do I need to pay for a VPS? (seems to defeat the point of self hosting)

source

Comments

Sort:hotnew top

MehBlah@lemmy.world ⁨3⁩ ⁨months⁩ ago
I use afraid.org to keep my dynamic dns pointed at my routers ip. With afraid.org dns you only need a curl statement scheduled on the opendns router to keep the dynamic ip updated.

source
Wolfwood1@lemmy.world ⁨3⁩ ⁨months⁩ ago
Self hosting doesn’t mean you should host everything yourself at home, using a VPS you manage (so the data inside it is still yours) is also a viable option for selfhosting. I myself host some services at home and a few others in a VPS.

As for Dyndns, I’ve used a few providers over the years. DuckDNS is the one I’ve been using for 5 years or so and it’s not failed me once. Pretty happy with it.

Maybe you could have a duckdns pointing to your dynamic IP and your domains / subdomains with a CNAME pointing to the dyndns address?

source
MangoPenguin@lemmy.blahaj.zone ⁨3⁩ ⁨months⁩ ago
Many DNS providers have an API and are supported by various dynamicDNS clients. I use Cloudflare and the built in client on my Opnsense router.

OpenWRT should have a client too that supports a bunch of services.

source
loudwhisper@infosec.pub ⁨3⁩ ⁨months⁩ ago
Since you run already OpenWrt, you can check out openwrt.org/docs/guide-user/services/ddns/client

There is a list on this page of compatible services. If you don’t want to use one more service (DNS), you can use a domain registrar with an API (like porkbun) and find online tools that work with that.

Be aware of the risks of hosting your websites publicly from home, make sure to run them in very isolated environments. Having your VPS compromised is bad, but having your home network compromised is much worse!

source
- abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  
  Be aware of the risks of hosting your websites publicly from home, make sure to run them in very isolated environments. Having your VPS compromised is bad, but having your home network compromised is much worse!
  
  Agree - Not something I will throw myself into.
  
  source
- abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  Yes I use no-ip but have to confirm the domain name every month or so and cant use my own domain on the free tier. (Maybe im just being cheap) - Also I haven’t been able to figure out how I would use / get SSL certificates.
  
  source
  - Willdrick@lemmy.world ⁨3⁩ ⁨months⁩ ago
    Try duckdns, it doesnt nag you every month and it just works
    
    source
  - loudwhisper@infosec.pub ⁨3⁩ ⁨months⁩ ago
    Yes, I have used it in the past and it was annoying…
    
    You can get SSL certs with letsencrypt, but you need to use the http verification method.
    
    source
    -> View More Comments
- bane_killgrind@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  That lists afraid.org as a ddns provider.
  
  They are pretty great, I use them as my domain host.
  
  source
BearOfaTime@lemm.ee ⁨3⁩ ⁨months⁩ ago
VPS with a tunnel between it and home services (Wireguard/Tailscale, etc)in my opinion is Best Way as it isolates your home gateway (no open ports, because you make outbound connections to your VPS), and let VPS handle Identity and Access Management

source
- Zephyr@feddit.nl ⁨2⁩ ⁨months⁩ ago
  +1 for using Tailscale funnel Don’t use a lot of resources and easy to setup
  
  source
chiisana@lemmy.chiisana.net ⁨3⁩ ⁨months⁩ ago
ddclient paired with a supported provider.

source
K3can@lemmy.radio ⁨3⁩ ⁨months⁩ ago
I’m using cloudflare as my nameserver and the free API seems to work just fine with ddclient.

source
TCB13@lemmy.world ⁨3⁩ ⁨months⁩ ago

Free Dyndns services seem to be a bit crap

Why do you say that?

source
- Toribor@corndog.social ⁨3⁩ ⁨months⁩ ago
  DuckDNS is great… but they have had some pretty major outages recently. No complaints, I know it’s an extremely valuable free service but it’s worth mentioning.
  
  source
anzo@programming.dev ⁨3⁩ ⁨months⁩ ago
There are two options, one is tunneling (e.g. tailscale, cloudfare tunnels, or a VPS either with special software or plain old SSH port forward constant connection). The other option, the most popular answer (I think, influenced by how yoy asked) is Dynamic DNS or DynDNS (e.g. duck, hurricane, freedns, etc.) this second one is like the classic solution.

source
revv@lemmy.blahaj.zone ⁨3⁩ ⁨months⁩ ago
You can get super cheap VPSs and use them just as a reverse proxy (with access via VPN). I host 11 servers using one single-core VPS as a reverse proxy. All data resides on premises, in house. I pay 10/yr for VPS. It definitely does not defeat the purpose.

source
- yatzy@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  From where can you get a VPS for that price?
  
  source
  - revv@lemmy.blahaj.zone ⁨3⁩ ⁨months⁩ ago
    Check out low end box. I found coupons for racknerd. I have one VPS that’s $10/yr, another that’s $18/yr. I’ve had zero downtime in the 18 months I’ve used them. No complaints from me. YMMV of course.
    
    source
- abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  Yeah maybe I need to consider this.
  
  source
Nomecks@lemmy.ca ⁨3⁩ ⁨months⁩ ago
Script that checks your external IP and updates your DNS provider via API.

source
Kit@lemmy.blahaj.zone ⁨3⁩ ⁨months⁩ ago
Namecheap domains include a dynamic DNS application for free and it works well. Be aware that it only runs on Windows.

source
- Pika@sh.itjust.works ⁨3⁩ ⁨months⁩ ago
  also keep in mind namecheaps API only functions for business grade, and also is not clearly documented, there is a “dynamic dns setup page” but it isn’t up to date. I find myself trying to use openwrt’s DDNS pages for it but it still isn’t accurate, I am likely going to transfer elsewhere when im closer to the end of my lease.
  
  source
hendrik@palaver.p3x.de ⁨3⁩ ⁨months⁩ ago
I think you got enough recommendations for several tunneling solutions.

Apart from that (and free DynDNS) you could also use a regular paid DNS provider. Some of them also offer DynDNS or an API. I think I saw some regular providers in the list of my DynDNS client on my router, next to the cheap or free ones.

source
cizra@lemm.ee ⁨3⁩ ⁨months⁩ ago
How often does your IP actually change? Mine changes so rarely (during extended power outages, say) that I am able to just update my IP manually when it does.

I even used to run my own authoritative DNS server at home (the one offered by my registrar isn’t configurable enough, think SRV and TXT records) - for that, I have a web UI at my registrar to set the IP addresses of the DNS server.

source
- phanto@lemmy.ca ⁨3⁩ ⁨months⁩ ago
  I have dyndns, have since they were 10$ a year, and I’ve gradually realized that my ISP changes my IP on average less than once a year…
  
  source
possiblylinux127@lemmy.zip ⁨3⁩ ⁨months⁩ ago
Don’t expose your services directly to the internet. Instead rent a VPS and the use Wireguard to bring the traffic back home. In your home network your services should be in there own VLAN and everything should be isolated and sandboxed. Everything has the potential to be compromised so always practice least privilege and defense in depth.

source
- lud@lemm.ee ⁨3⁩ ⁨months⁩ ago
  Or just set up your home network and services properly. Ideally with reverse proxies and maybe a proper DMZ.
  
  source
abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
Wow thanks everyone. I think I need to take another look at some of the DynDNS provides and digest all your great feedback.

Id like to go beyond personal self hosting stuff and maybe run some stuff that requires Federation. Im just thinking at the moment.

source
traches@sh.itjust.works ⁨3⁩ ⁨months⁩ ago
If you can avoid it, don’t open ports in your firewall, don’t publish your home IP address, and keep everything behind a VPN. If only you and your family will be using these services, go with Tailscale or one of its competitors. Otherwise, VPS or cloudflare tunnel/competitor.

source
JRaccoon@discuss.tchncs.de ⁨3⁩ ⁨months⁩ ago
I’ve been using No-IP free plan for years without issues. Inputted the credentials to my routers DDNS client and then basically forgot about it. Free users need to confirm their account once a month via email but that’s just one click.

If your domain registrar happens to have an API to update DNS entries, you could implement DDNS yourself by writing a simple automated script to check the external IP (e.g. via ipify.org) and if it’s changed from the last check then call the API to update the DNS entries.

source
- TCB13@lemmy.world ⁨3⁩ ⁨months⁩ ago
  
  No-IP
  
  Don’t recommend that. There are plenty of better alternatives such as freedns.afraid.org and www.duckdns.org that aren’t run by predatory companies that may pull the plug like DynDNS did.
  
  source
  - JRaccoon@discuss.tchncs.de ⁨3⁩ ⁨months⁩ ago
    Sure. I’m not recommending anything, just stating what has worked for me. For simple use cases, I think most of the DDNS services are pretty much the same anyway and it’s easy to switch to an another one if one stops working for some reason.
    
    source
- abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  Yeah been using No-ip free but I worry that one day I will forget to confirm and ill ge cut-off.
  
  source
cmnybo@discuss.tchncs.de ⁨3⁩ ⁨months⁩ ago
FreeDNS works pretty well as long as you don’t need more than 5 DNS records.

source
- infeeeee@lemm.ee ⁨3⁩ ⁨months⁩ ago
  Other free services I had good experiences with:
  
  www.duckdns.org
  
  www.dynu.com
  
  source
Decronym@lemmy.decronym.xyz ⁨3⁩ ⁨months⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

DNS Domain Name Service/System

IP Internet Protocol

VPN Virtual Private Network

VPS Virtual Private Server (opposed to shared hosting)

[Thread #891 for this sub, first seen 27th Jul 2024, 19:35] [FAQ] [Full list] [Contact] [Source code]

source
Charadon@lemmy.sdf.org ⁨3⁩ ⁨months⁩ ago
If you go down the VPS route, a headscale server on a cheap $3.50 VPS would be the way to go. Wouldn’t even have to deal with IP addresses at that point, while still being able to self-host all your services, with the cheap VPS being a glorified switch/firewall.

source
Toribor@corndog.social ⁨3⁩ ⁨months⁩ ago
Cloudflare has an api for easy dynamic dns. I use oznu/docker-cloudflare-ddns to manage this, it’s super lightweight:

docker run \ -e API_KEY=xxxxxxx \ -e ZONE=example.com \ -e SUBDOMAIN=subdomain \ oznu/cloudflare-ddns

Then I just set CNAMEs for my public facing services to point to ‘subdomain.example.com’ and a reverse proxy to get incoming traffic to the right service.
source
fmstrat@lemmy.nowsci.com ⁨3⁩ ⁨months⁩ ago
I’ve used big names like ns1 and Cloudflare for free.

source
IsoKiero@sopuli.xyz ⁨3⁩ ⁨months⁩ ago
You can pay for dyndns service which should be more reliable than free ones. I don’t have any experience with those, so I can’t give any recommendations. What I’m running is that I use few of the free ones which are updated either from my router or from a linux VM and I’ve just pointed few easy to remember CNAME records from my own domain to those dynamic addresses. It’s not the best thing in the world, but my dynamic IP tends to be pretty static as it usually changes only when my own hardware is down for a longer period of time (few hours or so, so a longer power outage or a hardware maintenance gone wrong).

source
KeepFlying@lemmy.world ⁨3⁩ ⁨months⁩ ago
Many registrars let you buy a domain and set up dynamic DNS for it within their system so you can own a domain and get dyndns on it.

Otherwise you could accomplish it with a VPS but you’d only need the smallest one available because it would just need to run nginx to forward to your home ip (and a small tool to update that IP when it changes). So you could probably get something for less than $5/mo.

source
bungle_in_the_jungle@lemmy.world ⁨3⁩ ⁨months⁩ ago
I use TailScale and their free Personal plan.

Disclaimer though: I haven’t done much due diligence on it. It was easy to install when I first started self hosting with Umbrel and I use it so rarely that is good enough for my usage.

source
- abeorch@lemmy.ml ⁨3⁩ ⁨months⁩ ago
  I want to be independent. My understanding is that Tail scale relies on a service they run or a endpoint you run on a VPS - Is that right?
  
  source
  - bungle_in_the_jungle@lemmy.world ⁨3⁩ ⁨months⁩ ago
    Oh right, yeah you’re dependent on their service.
    
    source

Fewer Letters	More Letters
DNS	Domain Name Service/System
IP	Internet Protocol
VPN	Virtual Private Network
VPS	Virtual Private Server (opposed to shared hosting)