submitted 1 year ago* (last edited 1 year ago) by to c/selfhosted@lemmy.world
 

Today I set up my old laptop as a Debian server, hosting Immich (for photos), Nextcloud (for files), and Radicale (for calendar). It was surprisingly easy to do so after looking at the documentation and watching a couple videos online! Tomorrow I might try hosting something like Linkwarden or Karakeep.

What else should I self-host, aside from HA (I don’t have a smart home), Calibre (physical books are my jam), and Jellyfin (I don’t watch too many movies + don’t have a significant DVD/Blu-ray collection)?

I would like to keep my laptop confined to my local network since I don’t trust it to be secure enough against the internet.

edit: I forgot, I’m also hosting Tailscale so I can access my local network remotely!

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 1 year ago*

If you want to expose a container based service just for yourself over internet, you can -

  • If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].

  • If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].

In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default you should set your firewall to block all incoming request from anywhere except LAN.

I'm personally using Cloudflared Tunnel, but planning to migrate to Tailscale.

[1] https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-ubuntu-20-04

[2] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/

[3] https://tailscale.com/

  • source
  • parent