this post was submitted on 28 Oct 2026
44 points (90.7% liked)

Selfhosted

63469 readers
554 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
44
Is webmin safe to have accesible over the web (sh.itjust.works)
submitted 4 days ago* (last edited 4 days ago) by DrunkAnRoot@sh.itjust.works to c/selfhosted@lemmy.world
45 comments fedilink hide all child comments
 

As the title says ive started running webmin. And i wanna know if its safe for me to reverse proxy (with 2fa) or should i just use tailscale or ssh to access it.

you are viewing a single comment's thread
view the rest of the comments
[–] LewdLemon@sh.itjust.works 5 points 3 days ago* (last edited 3 days ago) (1 children)

That's fair, but I still can't see how a VPN connection makes your stuff less accessible - at least to you.

[–] ITGuyLevi@programming.dev 2 points 3 days ago (1 children)

Just by making it so I can't access from a system I don't control. Like say I need to retrieve a document from my house, but I'm in a SCIF, or a waiting room, or anywhere else I wouldn't have my personal device, it's super useful to just connect to something like Nextcloud and pull it down.

[–] LewdLemon@sh.itjust.works 3 points 3 days ago (1 children)

I didn't say you should put your Nextcloud instance behind a VPN. Mine is public too.

I'm saying you should put your administrative access behind a VPN. SSH, reverse proxy admin panel, you name it. You need not do administrative stuff from work.

[–] ITGuyLevi@programming.dev 1 points 3 days ago* (last edited 3 days ago)

Oh yeah, I 100% agree with that, honestly two VPNs are better given you wouldn't want your normal VPN to terminate into your management vlan (nor should you want your management vlan to have access to the internet). I thought we were just discussing normal homelab stuff, all administrative stuff should really be oob.