Accessing your resources away from home reddit / selfhosted ---------------------------------------------------------------------- Sajberspejs · 2023-10-31 09:39 Hello nerds! How do you go about accessing your self-hosted resources when you're away from home? I've used portforwarding, VPN, Tailscale and Headscale in that order but recently switched to Nebula. Tailscale/Headscale was probably better than Nebula, but I just couldn't stand trusting either Tailscale or the VPS used to host Headscale. With Nebula I don't need to trust the lighthouses, because they can't access my network even if compromised. I also really like the built-in firewall that's looking at node certs when filtering traffic. ---------------------------------------------------------------------- CrispyBegs · 2023-10-31 10:35 cloudflare tunnels ---------------------------------------------------------------------- BebopTheRocksteady · 2023-10-31 12:24 [ZeroTeir](https://www.zerotier.com/) ---------------------------------------------------------------------- Interesting_Ad_5676 · 2023-10-31 12:28 Host your own wireguard instance or use netmaker. You are done. ---------------------------------------------------------------------- thekrautboy · 2023-10-31 12:37 Wow this question has never been asked here before. ---------------------------------------------------------------------- Eirikr70 · 2023-10-31 12:38 I use port forwarding with Nginx and Crowdsec for the services I want widely exposed, and Wireguard for those I want accessed only by myself. ---------------------------------------------------------------------- plEase69 · 2023-10-31 12:56 Choose either or with or many upto you. Tailscale, Wireguard server, zerotier, Cloudflare Tunnels My primary are Tailscale for LAN only applications on cloud and home. Cloudflare tunnels for access over internet for some applications. ---------------------------------------------------------------------- danny6690 · 2023-10-31 12:57 I have wiregard server on my unraid server and I have a backup on a raspberry pi ---------------------------------------------------------------------- mshorey81 · 2023-10-31 13:18 Wireguard to my pFsense VM. Drop the gun, walk away. ---------------------------------------------------------------------- Jcarlough · 2023-10-31 15:15 This question gets asked a lot. I personally using cloudflare tunneling. This is due to not needing a program on both ends for a secure connection - as I use guacamole for RDP and VNC access outside the network. ---------------------------------------------------------------------- dnt_pnc · 2023-10-31 15:26 My router came with a wireguard gateway. As I have a dynamic IP I set wireguard up with a ddns domain pointing to my IP. ---------------------------------------------------------------------- ChurchOfSatin · 2023-10-31 18:43 Isn’t using Cloudflare for Plex against the TOS. ---------------------------------------------------------------------- avnoui · 2023-10-31 20:02 Good old WireGuard. Takes 20 seconds to add a new peer if I want to invite someone new. Don’t really get the point of using proprietary solutions like ZeroTier or Tailscale for this. ---------------------------------------------------------------------- reddit-gk49cnajfe · 2023-10-31 21:00 CGNAT ---------------------------------------------------------------------- avnoui · 2023-10-31 21:05 I can do NAT in WireGuard too. ---------------------------------------------------------------------- reddit-gk49cnajfe · 2023-10-31 21:08 You won't be able to reach the server if you are behind CGNAT... I think you are referring to the WG routing, rather than accessibility of the server from the WWW ---------------------------------------------------------------------- microlate · 2023-10-31 21:10 Lmfao! Came to put a sarcastic comment as well but glad someone else did this time ---------------------------------------------------------------------- avnoui · 2023-10-31 21:25 Ah yeah I guess that’s an issue if your ISP doesn’t let you mess with CGNAT configs on your router. Mine does so I forward port 51820 to my home server and call it a day. ---------------------------------------------------------------------- esturniolo · 2023-10-31 22:24 I’ll take the opportunity to surprise you with another one: I hope that you are confortable: which is the best way to store my photos locally? I know. You’re in shock right now. ---------------------------------------------------------------------- [deleted] · 2023-10-31 23:05 [deleted] ---------------------------------------------------------------------- Jcarlough · 2023-10-31 23:57 Not sure. I haven’t used it with Plex. ---------------------------------------------------------------------- reddit-gk49cnajfe · 2023-11-01 02:37 Sounds like you just have plain NAT then ---------------------------------------------------------------------- TBT_TBT · 2023-11-01 10:50 If you don’t trust Tailscale OR THE VPS YOU ARE ROOT ON YOURSELF, you should maybe not host anything. ---------------------------------------------------------------------- Sajberspejs · 2023-11-01 11:06 I trust my VPS less than my servers at home because it's more exposed. If I'm putting my tinfoil hat on, I trust neither my VPS nor Tailscale because big brother can do whatever they want with them. The current laws in my country permits the police to snoop around just because you're related to a criminal. ---------------------------------------------------------------------- TBT_TBT · 2023-11-01 11:07 Then self host Zerotier on a home server with https://github.com/key- networks/ztncui . You don’t even have to forward a port for that to work. ---------------------------------------------------------------------- Sajberspejs · 2023-11-01 11:08 Interesting, thanks ---------------------------------------------------------------------- DopeBoogie · 2023-11-01 11:14 I use Tailscale with Tailnet Lock so one of my existing devices has to sign to approve new devices. This configuration is zero-trust. You don't have to trust tailscale for anything as your personal services hold the keys ---------------------------------------------------------------------- plEase69 · 2023-11-01 14:54 You need to disable Caching for the plex/Jellyfin stream so it doesn't use CF CDN. TOS 2.8 was removed this year. FYI [https://blog.cloudflare.com/updated- tos/](https://blog.cloudflare.com/updated-tos/) [https://www.reddit.com/r/selfhosted/comments/13j4pft/goodbye\_section \_28\_and\_hello\_to\_cloudflares\_new/](https://www.reddit.com/r/self hosted/comments/13j4pft/goodbye_section_28_and_hello_to_cloudflares_ne w/)