Norm (ノーム) :CastoriceBlushing: (@norm)

@norm@shrimp.biribiri.dev

people who host publicly-facing servers at home (not on a VPS), do you just directly use your home IP address w/ port forwarding or use a tunnel to a VPS (or a service like CF tunnels) with a reverse proxy?

purple 💜 @purple@nya.social

@norm i use a wireguard tunnel to a vps running traefik for ingress. everything other than a landing page is hosted off the cluster at home 😌

Toast @toast@donotsta.re

@norm back when I did this I had a Linux box as my router so I had a reverse proxy running on that proxying over to the server at home (so it can have a dhcp lease and everything), which came with the extra funny added benefit of being able to reverse proxy direct to containers if THEY go through dhcp and get picked up by dnsmasq etc, though I think what allowed that to work has been broken since

Alex Bissessur @alexb@alexbissessur.dev

@norm
I used to expose my home IP w/ port forwarding, but @eleboucher made Towonel (codeberg.org/towonel/towonel) and I run it on a small VPS

stefan (stefbun) @stefan@akko.lightnovel-dungeon.de

@norm Its kinda mixed here lol. I tunnel through a VPS but not for privacy.

My privacy is fucked by having that imprint (government mandated) on my sites. I tunnel I can have IPv4 Traffic to my home. Otherwise I would just the IP at home as is.

Norm (ノーム)

@norm@shrimp.biribiri.dev

@stefan do you have cgnat?

stefan (stefbun) @stefan@akko.lightnovel-dungeon.de

@norm DS-lite basically yeah. Though tbh I never. checked if the new ISP does give me an actual IPv4 instead...

Oha @Oha@pobierz.net

@norm Mix of both. IP gets tunneled in from a friends router bc my provider only gives me a single dynamic /64. Im lucky enough to not sit behind CGNAT so my Legacy IP is native

Domi🌲UwU (soon -> 38c3, call DOMI) @domi@donotsta.re

@norm why would you tunnel unless you don’t have a public IP, or you can’t be arsed to setup a ddns resolver? there are very few reasons not to just use your IP…

Norm (ノーム)

@norm@shrimp.biribiri.dev

@domi at least in my case I am somewhat paranoid about exposing my home IP and also my ipv4 address changes whenever I reboot my router or modem.

I might just go down the port forwarding route with a ddns setup soon though

snow @snow@cofe.rocks

@domi @norm i'd never host on my home ip despite having a public one bcs it's basically a free doxx [small local isp]
also the VPS is a nice point to cache things so a fedi post going viral doesn't destroy my home internet

Wolf480pl @wolf480pl@mstdn.io

@domi
eg. you live in a small town and your revdns reveals which small town
@norm

Domi🌲UwU (soon -> 38c3, call DOMI) @domi@donotsta.re

@wolf480pl @norm @snow with this sort of threat model you should be tunneling ALL of your traffic through a vpn of some sort. there’s plenty of ways an attacker can discover your home IP otherwise.

snow @snow@cofe.rocks

@domi @wolf480pl @norm guess what i'm already doing :D

Domi🌲UwU (soon -> 38c3, call DOMI) @domi@donotsta.re

@snow @wolf480pl @norm not saying that’s smart, but at least consistent

freek🔸 @freek@kubes.cloud

@norm (nice hostname btw) I am using @eleboucher 's instance of towonel on his VPS: it gives me the convenience and comfort of Cloudflare Tunnel, without giving them data or allowing any decryption of the traffic outside my home (it stays encrypted until it gets to my hardware), and I am supporting an important open source project!