firewalling backup server and phone app
reddit / selfhosted

----------------------------------------------------------------------
mutself · 2023-12-22 16:10

So far I was self hosting services that mostly dealt with not so
personal data - music, movies and books. Note-taking service was the
closest that had some access to my personal data.

I am planning to host photo backup service - say immich. To host and
use immich, I want to firewall it so that the phone app and hosted
server only talk to each other and nothing else. To that end, ideally
I want

* Somehow allowlist an ip for the mobile app and block everything else
* Block all outgoing network data from the server

Is there a way to achieve this sort of zero trust model of setup?

Right now I run manual backups over over usb/wired connection.

Thanks in advance