A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post.
Resources:
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
I'm using wireguard with wg-easy. It's a gui that let you easely setup wireguard. My isp is giving a fixed ipv4. So i don't have to think about dns or other complicated things. I have Jellyfin and wg-easy installed on truenas as docker apps.
There are official app for any os you want.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| CGNAT | Carrier-Grade NAT |
| DHCP | Dynamic Host Configuration Protocol, automates assignment of IPs when connecting to a network |
| DNS | Domain Name Service/System |
| ISP | Internet Service Provider |
| NAT | Network Address Translation |
| Plex | Brand of media server package |
| SSO | Single Sign-On |
| TLS | Transport Layer Security, supersedes SSL |
| UDP | User Datagram Protocol, for real-time communications |
| VPN | Virtual Private Network |
| VPS | Virtual Private Server (opposed to shared hosting) |
| nginx | Popular HTTP server |
[Thread #41 for this comm, first seen 5th Jul 2026, 18:30] [FAQ] [Full list] [Contact] [Source code]
I use pangolin and subdomains on my domain. It works really well, and enables SSO login to all services on the network.
@Vegan_Joe
try tailscale
I second this, if it’s only you that needs access then Tailscale will be all that you need. You can use Tailscale funnel if you want it to be available to the wider web, but then you have to manage SSL certificates and it is slightly less secure.
I would caution against port forwarding and leaving your server open to the wider web.
As others have said, Tailscale is the most pragmatic solution. It's a mesh VPN based on Wireguard. It's implemented in such a way that you don't need a static IP and don't need to open any ports on your firewall. The caveat is that you either need to register an account on tailscale.com (it's free for small-scale use) or set up a self-hosted alternative like Headscale on a VPS. Then you have to install the Tailscale client on each of the hosts you want to access and log into your account.
Tailscale nodes will be accessible using an internal, private address in the 100.64.0.0/10 address space. You can also set up a split DNS that allows you to access your hosts using a DNS name like hostname.your-tailnet-name.ts.net.
You don't need a static IP, you just have to keep track of what your current dynamic IP is.
You can do this with either a free or a paid DNS service.
There are a few different 'free dns' services that will delegate a subdomain of theirs to you at no cost. Admittedly, I've never actually used one of these so their names escape me. Hopefully someone else can point one of those out if that's what you really want.
I purchased a domain via google domains, when they existed. It's now transferred to squarespace, because they bought out google domains a few years ago.
It was around $13/year when I first got it a decade ago. It's now around $28/year.
This allows me full control over the domain: I can use as many subdomains as I want to give each service I use it's own unique name. (Instead of using their own separate ports that you've gotta remember) My domain will also forward all inbound email to my gmail account; this lets me use email addresses like <servicename>@mydomain.example. This way, I don't share my real email and can immediately tell who sold my info to the highest bidder when I get spam. (I could also host my own email service if I really wanted, but I haven't bothered)
Add Cloudflare ontop (for free); and it can filter out known attacks, ddos attempts, geofence your services to regions you'll actually be in, provide/autorenew ssl certs for https, show you usage analytics, cache static data reducing server/network load, etc.
Ultimately, the paid option is well worth it IMO. $2/month (which I typically pay in 3-10 year blocks) is hardly anything.
/edit; vpns are good and all, but they require you to setup software on the remote device to connect to it, and that typically routes most if not all your traffic back to the vpn server then out to the internet. That can create speed/bandwidth issues.
A domain allows you to access your services from any Internet connection with 0 configuration on the client side. Just accessing it like any other website.
I also host a vpn directly from my network, that I access/find via my domain. This means I'm not dependent on a public service like tailscale, but can still add additional security to access private only services (stuff I don't expose to the open internet)
As averse as I am to spending money on subscription services, having my own domain for less than 30 bucks a year might be worth it.
I think I'm going to try out the tailscale VPN route first before I fully warm up to buying a domain.
*Edit-You've definitely got me sold on getting a domain! Thank you so much for all the info!
An easy way? I guess the term 'easy' depends on your expertise with networking, firewalls, etc. Sounds like you and I are at about the same level there. In which case the answer is: no, there's no easy way from what I can tell. I've looked into it and it's a lot more involved than, say, Plex (because Plex does a bunch of the routing and stuff for you, but at a cost).
Personally I purchased a domain, and use Caddy for a reverse proxy. My ISP gives me a static IP for free, but I don't think that makes a difference in this situation. Tailscale would be safer but requires more setup from friends. My friends seem to like how simple the setup is, and I also use requestrr so they can add movies/shows via a discord command.