New to hosting, looking for some tips
reddit / selfhosted

----------------------------------------------------------------------
OfficiallyBrown · 2023-11-14 00:11

I recently set up a server for plex to share with a couple friends,
which is easy enough to do.

I more recently got a domain from cloudflare with the intention of
hosting game servers with AMP and add Ombi for requests.

Now, I do trust a couple friends to give my ip to, but if they were to
want someone else to join id rather not be using my ip.

I was attempting to set up cloudflare until I saw they don't support
tcp/udp on the free tier.

I'm just looking for some tips about the best way to set everything up
without exposing a bunch of ports for everything

----------------------------------------------------------------------
mpopgun · 2023-11-14 00:38

Perhaps a reverse proxy is what you're looking for. Nginx makes one.
Setup users on that and give them access to different resources. I've
never tried gaming through one though.

You can also do vpn with wireguard, but they would need to setup the
vpn client on their end as well.

Zerotier is another vpn option.

Just make sure when you setup users you restrict them to just the
services they should have access to, or they can see your entire lan.

----------------------------------------------------------------------
persiusone · 2023-11-14 01:09

I'd use a VPN and give your friends the credentials for access to your
server(s)

----------------------------------------------------------------------
dazchad · 2023-11-14 01:52

There’s nothing really private about your ip. Whatever you need to do
to secure your network you have to do in any solution for this
problem.

----------------------------------------------------------------------
brody5895 · 2023-11-14 02:31

I haven't specifically done what you're asking but here's a general
outline. Set up a dynamic DNS service and point an A record from your
domains DNS settings at that. Then add a CNAME with a wildcard
forwarding to your A record. Forward Port 443 and 80 to your server in
your router settings. Run caddy (or whatever you're most comfortable
with) on that server and set up reverse proxies using subdomains to
the proper ports. Set up fail2ban to watch the logs. When in doubt,
ChatGPT knows all these services amazingly, or feel free to reach out
and I can try my best to help lol.

----------------------------------------------------------------------
tech2but1 · 2023-11-14 18:25

What are you expecting them to do with your IP?

----------------------------------------------------------------------
OfficiallyBrown · 2023-11-14 19:04

I suppose that that's what I'm really after. It would be nice to be
able to just give out a domain name or something easier to remember
for people besides an IP, but I guess it isn't 100% necessary

----------------------------------------------------------------------
OfficiallyBrown · 2023-11-14 19:05

Thanks, I'll check that out when I get a chance

----------------------------------------------------------------------
dazchad · 2023-11-14 19:16

A domain will make things much easier, for sure. What I meant is that
you don't really need to hide your IP on the DNS records since you are
opening it up anyway. Secure the open ports as much as possible and
that's that.