101010.pl is one of the many independent Mastodon servers you can use to participate in the fediverse.
101010.pl czyli najstarszy polski serwer Mastodon. Posiadamy wpisy do 2048 znaków.

Server stats:

502
active users

#dynamicdns

0 posts0 participants0 posts today

Reminder for casual #DNS admins (like me) who are #SelfHosting : instead of sticking (or fighting) with your registrar's own #DynamicDNS service you can just choose any dynamic DNS service that fits your needs and use the generated domain name as a CNAME entry for the target domain in the zone file at your registrar...

when I want to expose an app running on my home-network:

when you are self-hosting at home, and you want to give friends access to your jellyfin, whats your preferred way of doing this? My focus is on security, but I'm not an expert on this.

Right now, what I have done is, I set up pivpn with a firewall that exposes only the jellyfin ip/port, so that other stuff on my network isn't available to connected users.

However, their whole internet traffic would go through my network now (if not split-tunneled), unless I restrict internet access, which would also be a dick move of me to people who forget to switch off the VPN 😆

I was now thinking about setting up a reverse proxy, instead of this whole VPN idea.

How is the security when I'm using a dynamic DNS, that points to my home-network, where I'm using a reverse proxy to catch the requests and expose only jellyfin? How is the security level of a reverse proxy vs vpn?

Looking forward to reading opinions and ideas!

I'd also like to give a shout-out to desec.io who sadly don't appear to have any social media presence, so I'd like to draw some attention to them here. deSEC is a Berlin based free secure DNS provider running exclusively on #FOSS, who aim to make #DNSSEC features easily available. They provide both a #dynamicdns and #hosteddns service and run a global #Anycast network. An #opensource #DNS is the perfect partner for your #awesomeSelfhosted project like @snikket_im #XMPP #fediverse

desec.iodeSEC – Free Secure DNS
Replied in thread

@lightweight can OpenStack work with #DynamicDNS? If so, you might not even need a static IP. But you would need an ISP that provides sufficient upload bandwidth for a server to work effectively, and one that doesn't ban the use of servers on their consumer-grade connections and require a much more expensive server-grade connection for that. You're in a better position to know than me these days, but I'm not aware of any ISPs in Aotearoa offering that. This is a big part of what needs to change.