this post was submitted on 27 Jan 2025
4 points (100.0% liked)

Selfhosted

63148 readers
893 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I'm securing Immich using OAuth.

I don't have very nerdy friends so not many people appreciate this.

you are viewing a single comment's thread
view the rest of the comments
[–] ikidd@lemmy.world 0 points 2 years ago* (last edited 2 years ago) (2 children)

Like, good for you, man.

But you should really keep your stuff inside the VPN and not expose things, it opens up a pile of potential risks that you don't need to have. You can still use a reverse proxy inside the VPN and use your own DNS server that spits out that internal address to your devices for your various applications. If you absolutely, positively must have something exposed directly, put it on it's own VLAN and with no access to anything you value.

[–] EncryptKeeper@lemmy.world 1 points 2 years ago (1 children)

@randombullet@programming.dev

Don’t listen to this guy. You don’t have to turtle all your stuff inside a VPN if you don’t want to. Hosting services on the internet is what the internet was created for. It’s up to you whether what you want to host is exposed to the internet or not, and as long as you’re aware of the risks do what you want man. I will mention that Immich specifically might not be the best idea to expose since it’s so unstable, but that depends on your level of comfortability. Worst case scenario is somebody gets into your Immich and can see all your photos. Would this be a dealbreaker for you? If so don’t expose it publicly. Otherwise you’re perfectly fine.

[–] ikidd@lemmy.world -1 points 2 years ago (1 children)

Nobody said they had to. I made him aware of the risks in case he wasn't. You seem to have an axe to grind there.

[–] EncryptKeeper@lemmy.world 0 points 2 years ago* (last edited 2 years ago) (1 children)

I’m not a big fan of amateur know-nothings regurgitating the same nonsense regurgitated to them by previous know-nothings, attempting to further the cycle to people finding their footing with self hosting, telling everybody what they “should” do based on their own limited understabding. It was a big problem on the self hosted reddit and up to this point has been less of a problem here.

[–] ikidd@lemmy.world -1 points 2 years ago

And yet here you are, making sure this guy knows he can expose anything he wants except the specific thing you decided is troublesome like immich. Maybe you'll be here to help him put it all back together with your wealth of knowledge and experience.

Take a hard look at yourself, you're doing all the stuff you accuse someone else of. Maybe you aren't always the smartest person in the room. In any case, I'm done with your shit. Go ruin someone else's day, you ray of sunshine.

[–] randombullet@programming.dev 1 points 2 years ago (2 children)

I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don't want her to keep asking me how do I turn on the VPN? If it's just me, then no issue, I'll use a VPN.

[–] Hawk@lemmynsfw.com 1 points 2 years ago* (last edited 2 years ago)

To be fair, wireguard is pretty painless.

[–] ikidd@lemmy.world 0 points 2 years ago (1 children)

You set up the VPN and it's always on. There's no hassle.

[–] EncryptKeeper@lemmy.world 1 points 2 years ago (1 children)

Unless you’re on IOS that will shut your VPN off regularly. Or you want somebody else to be able to access what you’re hosting without having to walk theme through a VPN setup they won’t understand.

[–] ikidd@lemmy.world -1 points 2 years ago* (last edited 2 years ago) (1 children)

I have a couple dozen customers on ios that use their camera servers via Tailscale. Never had a peep about that sort of thing.

And the last is the typical sort of "convenience" that gets people popped.

[–] EncryptKeeper@lemmy.world 0 points 2 years ago (1 children)

You’re hearing about it now. It’s an issue with the way iOS handles background tasks and there isn’t any way to fix it. It’s just how the OS works.

[–] ikidd@lemmy.world -1 points 2 years ago (1 children)

Well, apparently a bunch of farmers are smart enough to press a button without even bothering me about it.

[–] EncryptKeeper@lemmy.world 0 points 2 years ago (1 children)

Why would farmers not be smart enough to press buttons?

[–] ikidd@lemmy.world -1 points 2 years ago

Yah, imagine my surprise, it's almost like people are smart enough to manage a VPN without you holding their hands.