this post was submitted on 04 Aug 2025
76 points (97.5% liked)

Selfhosted

50435 readers
448 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

hi everyone,

I was just about to self-host a Ghost blog but then was warned that my ISP might change my external IP address at any time, so I would need to pay for a static IP address.

Is that true?

(I'd not seen much about that in stuff I've looked up so far about self hosting)

you are viewing a single comment's thread
view the rest of the comments
[–] Prunebutt@slrpnk.net 4 points 1 week ago* (last edited 1 week ago) (3 children)

I could make this quick: Is your internet access behind a CG-NAT? If yes: you're gonna need a static IP.

[–] 3dcadmin@lemmy.relayeasy.com 6 points 1 week ago (2 children)

Not necessarily, Cloudflare tunnels, headscale/tailscale will sort that issue out amongst several other ways

[–] Prunebutt@slrpnk.net 1 points 1 week ago (2 children)

But how will a tailnet help for a blog? At some point, the https port needs to be open.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 1 week ago

tailscale will tunnel through and you can set it to pass through https. Lots of different ways to achieve this, as long as you have control over the dns and are able to set https up it will work. This is why for me I still use cloudflare, you can even setup a subdomain through their tunnels and they act as a cdn. For example, I run a linkstack instance, send instance and much more

https://linkstack.relayeasy.com/@3dcadmin

[–] herrvogel@lemmy.world 1 points 1 week ago

Tailscale funnel is made for this.

[–] Paddy66@lemmy.ml 1 points 1 week ago (1 children)

I was going to use Cloudflare to sort this, but I'm uncomfortable how big they are getting / lack of competition in that part of the market. So we looked at Pangolin as an alternative, but it's a faff to self host.

Hence why we're back at exposing it straight out the back of Nginx Proxy Manager.

[–] 3dcadmin@lemmy.relayeasy.com 1 points 1 week ago

I get that.... fo me though as I have been using Cloudflare for many years I can't see any reason to change yet. That of course may change

[–] iii@mander.xyz 1 points 1 week ago (1 children)
[–] Prunebutt@slrpnk.net 2 points 1 week ago (1 children)

Care to explain what I got wrong?

[–] iii@mander.xyz 1 points 1 week ago (1 children)

Static IP is helpfull but not necessary. Even with NAT and a changeing IP there's options, such as:

  1. dynamic dns.
  2. Public reverse proxy or tunnel.
  3. Onion routing.
[–] Prunebutt@slrpnk.net 1 points 1 week ago (1 children)
  1. How do you open the https port behind a nas?
  2. That public tunnel needs at least a public IP address again.
  3. Ok, forgot that one. But then you're only accessible through Tor, isn't it?
[–] iii@mander.xyz 1 points 1 week ago (1 children)
  1. Port forwarding
  2. Yes, and there's services that do that for you
[–] Prunebutt@slrpnk.net 1 points 1 week ago (1 children)

You can't port-forward if you sit behind a nat.

[–] iii@mander.xyz 1 points 1 week ago (1 children)

Port forwarding was invented for exactly that

[–] Prunebutt@slrpnk.net 1 points 1 week ago (3 children)

Hou will you configure the ISP's NAT router to port-forward? You won't be able to reach the forwarded port if your ISP doesn't foward the port as well.

[–] Hawk@lemmynsfw.com 2 points 1 week ago

You can't, this guy doesn't know what he's taking about.

Port forward behind CGNAT won't get you out. Best bet here would be ipv6.

Tor would work. However, only over Tor obviously.

[–] Saik0Shinigami@lemmy.saik0.com 1 points 1 week ago (1 children)

ISP’s NAT

That has it's own name... CG-NAT. Thus why people are responding to you as if you're wrong. As you wrote it you are wrong though. But there's still answers like argo tunnels (if you are okay with cloudflare) and other similar solutions.

Or you can setup a vps and tunnel through that.

[–] Prunebutt@slrpnk.net 1 points 1 week ago (1 children)

Oh, I see. Sorry I was too dumb to research that term for the comment.

Or you can setup a vps and tunnel through that.

But then the VPS needs a static address.

But getting a static address for your VPS is likely much easier than getting it from certain ISPs.

For instance, Quantum Fiber doesn't support static IPs at all... But most VPSes can and do.

[–] iii@mander.xyz 1 points 1 week ago

Aah, ISP's NAT. Yes, in that context, it's correct that you can't port forward.

Perhaps you can STUN through, but unlikely to get a good port.

[–] Paddy66@lemmy.ml 1 points 1 week ago (1 children)

My router says it has NAT enabled (in the WAN settings section - for the internet connection)

[–] Prunebutt@slrpnk.net 3 points 1 week ago

It's not about your router. But rather if your ISP connects several households with the same IP.

Check this answer for more info