CalDAV Server Without Exposing Server?

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨ClownsInSpace2@lemm.ee⁩ to ⁨selfhosted@lemmy.world⁩

I self-host a couple of services, but I haven’t exposed anything outside my home network. I want to self-host my calendar, but not sure if I can do it without exposing it. Any recommendations on the best way to go about this? For those who do self-host a calendar service, how do you keep it secure?

source

Comments

Sort:hotnew top

dingdongitsabear@lemmy.ml ⁨1⁩ ⁨year⁩ ago
unless you really need it, set up sync to work only on your home network. you enter a new event when away and it stays on your device.

once you get home, it then syncs with radicale/syncthing/nextcloud/whatevers.

source
oldfart@lemm.ee ⁨1⁩ ⁨year⁩ ago
Unless you live a very dynamic lifestyle that requires your calendar to be 24/7 synced, you can just use whatever server software you like, make it listen in LAN only, and have your devices sync when they’re at home.

DecSyncCC and Syncthing is another option.

source
Nomad@infosec.pub ⁨1⁩ ⁨year⁩ ago
If you want sync to your phone, just set up a VPN. Now your phone and mobile computer can always access your services. I use SoGO, it has calendar hosting, authenticated sync which you can use with davx on android and the web interface is basic but usable. You can also enable mail, tasks and contact sync all in one.

source
ChillPill@lemmy.world ⁨1⁩ ⁨year⁩ ago
VPN is the way to go if you’re not sharing it with a bunch of people

source
reboot6675@sopuli.xyz ⁨1⁩ ⁨year⁩ ago
Related question, what CalDAV server are you using? Been looking for something lightweight

source
- hendrik@palaver.p3x.de ⁨1⁩ ⁨year⁩ ago
  I think Baikal or Radicale would be the usual contenders for that
  
  source
tenebrisnox@feddit.uk ⁨1⁩ ⁨year⁩ ago
Could you set up a Cloudflare tunnel and make sure the security rules are tight enough to keep others out?

source
enemenemu@lemm.ee ⁨1⁩ ⁨year⁩ ago
I run nextcloud on my machine. If there’s some loophole, there would be one in their hosted instance as well. There’s nothing really I can do about security of it.

source
tapdattl@lemmy.world ⁨1⁩ ⁨year⁩ ago
I think the general consensus for homelabbers is a mesh network – Tailscale and Netbird are the two most popular options

source
- 0x0@programming.dev ⁨1⁩ ⁨year⁩ ago
  Or headscale.
  
  source
Selfhoster1728@infosec.pub ⁨1⁩ ⁨year⁩ ago
mTLS with a reverse proxy!

source
- cmg@infosec.pub ⁨1⁩ ⁨year⁩ ago
  What caldav clients supports that?
  
  I’d recommend the Tailscale style approach. MTLS is a pain imo without infrastructure and especially on the app layers
  
  source
  - Selfhoster1728@infosec.pub ⁨1⁩ ⁨year⁩ ago
    Tailscale is simpler but when you’re accessing from devices behind VPNs like I do mTLS is a lifesaver.
    
    I find mTLS cool too :P
    
    source
- ClownsInSpace2@lemm.ee ⁨1⁩ ⁨year⁩ ago
  This is the first time I’ve heard of mTLS. Sounds interesting, any tutorial recs?
  
  source
  - Selfhoster1728@infosec.pub ⁨1⁩ ⁨year⁩ ago
    Not any in particular but mTLS is essentially just a reverse proxy (like nginx) asking a client for a certificate to be able to access the service behind it.
    
    There are quite a few guides out there, so choose one for your reverse proxy of choice!
    
    source
    -> View More Comments
wildbus8979@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
Who do you want to have access to said calendar?

source
- ClownsInSpace2@lemm.ee ⁨1⁩ ⁨year⁩ ago
  Just myself, but I would like to keep it synced between my phone and my laptop while also keeping a backup.
  
  source
  - wildbus8979@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
    Then you should really look into setting up a personal VPN. After that what you use to do calendar becomes irrelevant in terms of access.
    
    source