Hi everyone, first time posting since the Reddit went nuclear on sanity. With the advent of Lemmy, I finally got around to booting my home-server back up and stood up my own instance :)

How do you all self host stuff? I’ve been happily running Nextcloud, Home Assistant, Plex, etc locally, but none of that has been internet facing. As I’m getting back into this I want to share stuff with my friends and family and getting them all to use a VPN seems like a stretch.

Wondering if the general consensus is that it’s better to put shit on a VPS, on your own HW locally (with firewalls, safeguards, etc) or some combo of the two?

  • dartanjinn@lemm.ee
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    For public facing, I use Cloudflare tunnels. For VPN access from across the divide, I use tailscale and pivpn depending on use case.

    Most of my servers are hosted locally on a separate vlan and firewalled off from my internal network.

    • Nick@nickbuilds.netOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      How are those tunnels? Saw those in my dashboard last time when I was looking.

      I’ve got Wireguard set up and that’s been good and lightweight for me. Also have everything firewalled off onto it’s own VLAN with ACLs so my data is locked down. That took forever to implement but loving it so far.

      The internet facing stuff is on a completely separate box with read-only access to a pretty limited NFS share for retrieving content off the NAS :)

      • dartanjinn@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        I use them a lot actually. I really like them. It’s really useful for things like vaultwarden access from any machine, anywhere. I also host a humhub instance for my mother’s bible study group and a couple informational sites behind them. It pushes all of the traffic through 443 without having to fiddle with SSL. I wouldn’t lean on it for major website without local SSL but for small use cases like mine it works great.