this post was submitted on 30 May 2025
63 points (97.0% liked)

Selfhosted

46653 readers
456 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Hi fellow homelabbers! I hope your day / night is going great.

Just stubled across this self-hosted cloudflare tunnel alternernative called Pangolin.

  • Does anyone use it for exposing their homelab? It looks awesome, but I've never heard of it before.

  • Should I be reluctant since it's developed by a US-based company? I mean security-wise. (I'll remove this question if it's too political.)

  • Does anyone know of alternatives pieces or stacks or software that achieve the same without relying on cloudflare?

Your insights are highly appreciated!

you are viewing a single comment's thread
view the rest of the comments
[–] nimmo@social.nimmog.uk 9 points 1 week ago (8 children)

I've seen lots of talk about headscale, an open source tailscale which allows you to create your own tailnet and I'm sure I've seen people talking about using tailscale as a reverse proxy tool, but it's not something I've explored in detail.

Pangolin is somewhat higher on my list of things to explore than headscale though.

If you're looking for a reverse proxy caddy and Traefik are also widely used.

With all of these solutions though you're going to need to have some online provider somewhere handling DNS for you so that you can have your domains be pointed to your IP address.

[–] Blaster_M@lemmy.world 3 points 1 week ago (4 children)

I have yet to get headscale to work with my system. No turnkey setup, instructions that lack clarity, and in the end... idk how it's supposed to do the thing.

[–] YodaDaCoda@aussie.zone 2 points 1 week ago (1 children)

I did manage to get it to work, but I recall it took me a while. I have several devices connected to it now though. I'm keenly looking forward to the autogroup:self ACL support so I can set up sensible ACLs and share my net with some mates - I only have my own devices on it right now.

Anything I can share that might help your understanding?

[–] Blaster_M@lemmy.world 1 points 1 week ago (1 children)

Every system I can run headscale on I need to do it via an nginx reverse proxy

[–] YodaDaCoda@aussie.zone 1 points 1 week ago

Yes you need a way to expose it over https. A reverse proxy is easiest. I use Caddy.

load more comments (2 replies)
load more comments (5 replies)