Just learned how to do a reverse proxy

[email protected]

I don’t even bother with the internal DNS server. I just set my A records in Cloudflare to point to the private IPs

[email protected]

Do the private IPs not change at all? Or can you handle that automatically?

I have next to no experience, but I’m pretty sure that wouldn’t work for me since my IP changes? Idk

[email protected]

Opening it up lets you use it from devices that aren't on tailscale, or for friends and family. I have the same idea with Nebula instead of Tailscale, if I can figure it out.

[email protected]

You can either set a DHCP reservation in your router, or manually set the IP on the device.

When I say private IP, I’m referring to the internal IP e.g 192.168.1.X

Means internally I just go to the domain without having to remember the IP I set.

[email protected]

Not really. Personally I'd allow the service account running jellyfin only access to read media files to avoid accidental deletion but otherwise no.

Also, jellyfin docs have a sample proxy config. You should use that. It's a bit more in depth than a normal proxy config.

[email protected]

I want to be able to upload/download/share my photos from anywhere in the world without using a VPN. Additionally, this satisfies the wife requirement. It works in the background without her needing her to turn on the VPN. I don't want her to keep asking me how do I turn on the VPN? If it's just me, then no issue, I'll use a VPN.

[email protected]

I just use google OAuth since everyone I know has a google account. It just can't use OAuth on private IP addresses, just FQDNs.

[email protected]

Authelia is great. Recently added protection for multiple domains.

[email protected]

I tired the same, but my router wants to be smart by filtering DNS responses that points to local IP. I guess whoever designed it considered it a security feature.
It is a stock router from the ISP, its configuration interface is minimal, borderline to non existent.

[email protected]

Oooh. That makes more sense, thank you.

I somehow thought you’d meant your global IP addresses, lol

[email protected]

You set up the VPN and it's always on. There's no hassle.

[email protected]

Unless you’re on IOS that will shut your VPN off regularly. Or you want somebody else to be able to access what you’re hosting without having to walk theme through a VPN setup they won’t understand.

[email protected]

I have a couple dozen customers on ios that use their camera servers via Tailscale. Never had a peep about that sort of thing.

[email protected]

@[email protected]

Don’t listen to this guy. You don’t have to turtle all your stuff inside a VPN if you don’t want to. Hosting services on the internet is what the internet was created for. It’s up to you whether what you want to host is exposed to the internet or not, and as long as you’re aware of the risks do what you want man. I will mention that Immich specifically might not be the best idea to expose since it’s so unstable, but that depends on your level of comfortability. Worst case scenario is somebody gets into your Immich and can see all your photos. Would this be a dealbreaker for you? If so don’t expose it publicly. Otherwise you’re perfectly fine.

[email protected]

Don’t listen to this guy. You don’t have to turtle all your stuff inside a VPN if you don’t want to. Hosting services on the internet is what the internet was created for. It’s up to you whether what you want to host is exposed to the internet or not, and as long as you’re aware of the risks do what you want man. I will mention that Immich specifically might not be the best idea to expose since it’s so unstable, but that depends on your level of comfortability. Worst case scenario is somebody gets into your Immich and can see all your photos. Would this be a dealbreaker for you? If so don’t expose it publicly

[email protected]

You’re hearing about it now. It’s an issue with the way iOS handles background tasks and there isn’t any way to fix it. It’s just how the OS works.

[email protected]

Well, apparently a bunch of farmers are smart enough to press a button without even bothering me about it.

[email protected]

Why would farmers not be smart enough to press buttons?

[email protected]

Nobody said they had to. I made him aware of the risks in case he wasn't. You seem to have an axe to grind there.

[email protected]

I’m not a big fan of amateur know-nothings regurgitating the same nonsense regurgitated to them by previous know-nothings, attempting to further the cycle to people finding their footing with self hosting. It was a big problem on the self hosted reddit and up to this point has been less of a problem here.

agnos.is Forums

Just learned how to do a reverse proxy