this post was submitted on 27 Jan 2025
2 points (100.0% liked)

Selfhosted

53785 readers
597 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I'm securing Immich using OAuth.

I don't have very nerdy friends so not many people appreciate this.

you are viewing a single comment's thread
view the rest of the comments
[–] ikidd@lemmy.world 0 points 10 months ago* (last edited 10 months ago) (2 children)

Like, good for you, man.

But you should really keep your stuff inside the VPN and not expose things, it opens up a pile of potential risks that you don't need to have. You can still use a reverse proxy inside the VPN and use your own DNS server that spits out that internal address to your devices for your various applications. If you absolutely, positively must have something exposed directly, put it on it's own VLAN and with no access to anything you value.

[–] randombullet@programming.dev 1 points 10 months ago (2 children)

I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don't want her to keep asking me how do I turn on the VPN? If it's just me, then no issue, I'll use a VPN.

[–] Hawk@lemmynsfw.com 1 points 10 months ago* (last edited 10 months ago)

To be fair, wireguard is pretty painless.

[–] ikidd@lemmy.world 0 points 10 months ago (1 children)

You set up the VPN and it's always on. There's no hassle.

[–] EncryptKeeper@lemmy.world 1 points 10 months ago (1 children)

Unless you’re on IOS that will shut your VPN off regularly. Or you want somebody else to be able to access what you’re hosting without having to walk theme through a VPN setup they won’t understand.

[–] ikidd@lemmy.world -1 points 10 months ago* (last edited 10 months ago) (1 children)

I have a couple dozen customers on ios that use their camera servers via Tailscale. Never had a peep about that sort of thing.

And the last is the typical sort of "convenience" that gets people popped.

[–] EncryptKeeper@lemmy.world 0 points 10 months ago (1 children)

You’re hearing about it now. It’s an issue with the way iOS handles background tasks and there isn’t any way to fix it. It’s just how the OS works.

[–] ikidd@lemmy.world -1 points 10 months ago (1 children)

Well, apparently a bunch of farmers are smart enough to press a button without even bothering me about it.

[–] EncryptKeeper@lemmy.world 0 points 10 months ago (1 children)

Why would farmers not be smart enough to press buttons?

[–] ikidd@lemmy.world -1 points 10 months ago

Yah, imagine my surprise, it's almost like people are smart enough to manage a VPN without you holding their hands.

[–] EncryptKeeper@lemmy.world 1 points 10 months ago (1 children)

@randombullet@programming.dev

Don’t listen to this guy. You don’t have to turtle all your stuff inside a VPN if you don’t want to. Hosting services on the internet is what the internet was created for. It’s up to you whether what you want to host is exposed to the internet or not, and as long as you’re aware of the risks do what you want man. I will mention that Immich specifically might not be the best idea to expose since it’s so unstable, but that depends on your level of comfortability. Worst case scenario is somebody gets into your Immich and can see all your photos. Would this be a dealbreaker for you? If so don’t expose it publicly. Otherwise you’re perfectly fine.

[–] ikidd@lemmy.world -1 points 10 months ago (1 children)

Nobody said they had to. I made him aware of the risks in case he wasn't. You seem to have an axe to grind there.

[–] EncryptKeeper@lemmy.world 1 points 10 months ago* (last edited 10 months ago) (1 children)

I’m not a big fan of amateur know-nothings regurgitating the same nonsense regurgitated to them by previous know-nothings, attempting to further the cycle to people finding their footing with self hosting, telling everybody what they “should” do based on their own limited understabding. It was a big problem on the self hosted reddit and up to this point has been less of a problem here.

[–] ikidd@lemmy.world -1 points 10 months ago

And yet here you are, making sure this guy knows he can expose anything he wants except the specific thing you decided is troublesome like immich. Maybe you'll be here to help him put it all back together with your wealth of knowledge and experience.

Take a hard look at yourself, you're doing all the stuff you accuse someone else of. Maybe you aren't always the smartest person in the room. In any case, I'm done with your shit. Go ruin someone else's day, you ray of sunshine.