What is the safest way for my to enable access to my Raspberry Pi currently sitting on a local network? reddit / selfhosted ---------------------------------------------------------------------- toadkarter1993 · 2023-11-29 10:40 Hey folks, I just set up a Raspberry Pi home server with a bunch of containerised apps (FreshRSS, Firefly III, etc.). I'm now looking at some options to let me access this Pi from a device outside the network and am a little bit intimidated by all the options that I seem to have. My requirements are just to be able to access the Pi from my Android phone or Linux laptop and access the FreshRSS service. I'm not looking to stream media over this connection or do anything super data intensive. I don't have a static IP address or a domain name, but I do use a VPN subscription (some guides I read suggested that you could use a VPN to connect externally but haven't looked to deep into this yet). With this in mind, what would be my best option? Thanks in advance for your help! ---------------------------------------------------------------------- harlekintiger · 2023-11-29 10:51 Just setup a WireGuard vpn ---------------------------------------------------------------------- subven1 · 2023-11-29 10:52 Safest way would be Wireguard. If you don't have a static IP or domain, use an DDNS service like Duck DNS. ---------------------------------------------------------------------- spottyPotty · 2023-11-29 11:40 Ssh with ed25519 pubkey access and password login disabled works fine for me. I have access from my phone via termux and any other terminal software. ---------------------------------------------------------------------- c9001s · 2023-11-29 12:07 Best: Wireguard VPN, very easy to setup using PiVPN Second best: DDNS with port forwarding and a strong password Optional: Install XRDP for GUI and connect using Remote Desktop instead of SSH ---------------------------------------------------------------------- funkbruthab · 2023-11-29 12:34 My router (netgear orbi) has OpenVPN server built in, so I’ve been using that. Before I started doing that, I had nordvpn on my raspberry pi and my phone, so I was using the mesh network feature (just gotta remember the mesh ip address). Nordvpn mesh net is probably the easiest that is safe. Vpn is a little more learning intensive, but it works really good, I can use my local ip addresses on my phone to access services running at home while I’m on the go. If you want to just expose the specific service that’s running, getting a domain and using a cloudflare tunnel is really easy to set up, just gotta lock down your service as much as you can, or blacklist everybody but yourself in cloudflare. ---------------------------------------------------------------------- nitsky416 · 2023-11-29 12:59 This is the way ---------------------------------------------------------------------- AhmedBarayez · 2023-11-29 13:52 Tailscale 👍👍👍 ---------------------------------------------------------------------- soapymoapysuds · 2023-11-29 15:31 Install Tailscale on your Pi and on any other device you want to access it from. It’s super straightforward and you should be able to connect the two devices without opening any ports instantly. ---------------------------------------------------------------------- [deleted] · 2023-11-29 19:39 [removed] ---------------------------------------------------------------------- micalm · 2023-11-29 19:51 Free, foolproof, safe and quick way to do it is Tailscale. ---------------------------------------------------------------------- Nintenuendo_ · 2023-11-29 20:21 I went the nginx route, setup a quick website for my services, and subdomained my services behind cloudflare. https://nintenuendo.tv ---------------------------------------------------------------------- budius333 · 2023-11-29 20:24 Safest and fast - Wireguard. But you need to setup duckdns too. Safest and easiest - Tailscale. It's a userland implementation of Wireguard with added stuff to make it stupidly easy to run. But because it's not a kernel module, it's slightly slower. ---------------------------------------------------------------------- chargedmemery · 2023-11-30 00:59 Do u know de weh? ---------------------------------------------------------------------- harlekintiger · 2023-11-30 07:11 What does he need a static ip for when using WireGuard? ---------------------------------------------------------------------- subven1 · 2023-11-30 09:19 How do you find your home networks dynamic public IP to connect to your Wireguard? ---------------------------------------------------------------------- harlekintiger · 2023-11-30 14:23 I see your point, I forgot that other setups require this. For the record, I'm using a fritzbox with it's integrated WireGuard which automatically uses FritzDNS ---------------------------------------------------------------------- ProffesionalAds · 2023-12-01 04:27 Add [Netmaker](https://www.netmaker.io/) on the list as well. Though its still not that mature yet but Its a decent option which is a lot quicker than Tailscale. ---------------------------------------------------------------------- SpambotSwatter · 2023-12-01 14:12 /u/ProffesionalAds is a click-farming spam bot. Please downvote its comment and click the `report` button, selecting `Spam` then `Link farming`. With enough reports, the reddit algorithm will suspend this spammer. --- >!^(If this message seems out of context, it may be because ProffesionalAds is farming karma and may edit their comment soon with a link)!<