Selfhosted

63469 readers

541 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

171

Help an idiot protect his homelab and few services exposed to the internet. (sh.itjust.works)

submitted 2 days ago* (last edited 2 days ago) by neo2478@sh.itjust.works to c/selfhosted@lemmy.world

78 comments fedilink hide all child comments

Hi all,

I am running proxmox on a mini PC with a handful of services in my stack. I also run NPM in an LXC to reach my services through my domain name (service.domain.tld).

For my Arr related stuff, I use Usenet, and everything runs through a VPN.

I have three services which are public. Jellyfin, Seer and BookOrbit (for syncing Kobos).

Currently I have no security besides the built in login managers from the services, but I am considering setting up Authentik. I know I'm asking for trouble with my current set up.

I have elderly and extremely tech averse family members who live in two countries other than me, so tech support can be a challenge.

A lot of people suggest running a VPN, but it would be difficult for my family and I don't know how to make it work syncing our Kobos with BookOrbit.

I've also seen some posts about tunneling to a VPS somewhere and users can connect to the VPS without a VPN.

I feel this question has been asked several times, and I tried searching here and on the internet in general, but my knowledge is not good enough to use the right terms and to get something that is idiot proof.

Any suggestions on best practices or links to guides you recommend would be much appreciated. Also, what EU based affordable VPS would you recommend?

you are viewing a single comment's thread
view the rest of the comments

[–] MacStainless@piefed.social 1 points 1 day ago (1 children)

I installed CrowdSec yesterday and I’m curious as to where that screenshot can be found so I can determine if things are working properly. Where can I find that? I have only a single alert from last night which I think is good, but I am wanting to make sure I have things set up correctly before I can breathe easily.

[–] fonix232@fedia.io 1 points 1 day ago (1 children)

That screenshot is from ntfy - I hooked up the alerting from crowdsec (and a bunch of other things incl full logs from my servers, docker containers, APs and other network devices) into a tool I call Overseer. It is not yet public, so you can't really get a screenshot like mine.

However, CrowdSec does offer a dashboard of your instance, incl prevented attacks list etc.

[–] MacStainless@piefed.social 1 points 1 day ago

Thanks! I use a different app called Overseerr, but I think it’s pretty different than yours. 😂

Appreciate the info. I really want to make sure I didn’t only get half working and need to do more but looking at the crowdsec dashboard I think I’m good? I’ll have to do some more digging. Thanks again.