A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
It comes down to using secure passwords, 2 factor authentication, and updating software as soon as you can.
Check out Cloudflare's zero tier tunnel to only expose the services you need without port forwarding. Added benefit of masking your home's IP behind Cloudflare to prevent DDOS. Only downside is you need your own domain.
Why would anyone DDOS a random home server? I don‘t think OP has to worry about that.
Duckdns.org for dynamic dns. You can get a domain name like example.duckdns.org for free.
Caddyserver.com to reverse proxy to your running docker services. You’ll be able to set up jellyfin.example.duckdns.org
Crowdsec.net to secure the network
Tailscale for access to running docker services that you don’t need to share with friends.
Could you please be more specific what exactly Crowdsec brings to the table? In which way does it “secure the network”?
There's even a Traefik Plugins for crowdsec. I guess it's time to play with my Traefik Config again
The other day I learned about endlessh. I set that up, switched my actual sshd to listen on a different port, and the ssh login attempts from randoms essentially went down to 0. Pretty neat.
Sounds like security by obscurity to me. But still, nice result.
It's more targeted to avoid automated attacks.