this post was submitted on 01 May 2025
47 points (94.3% liked)

Selfhosted

48772 readers
611 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I am currently self hosting multiple services with Docker containers. A file server, Kiwix with Wikipedia and a PieFed instance sitting behind a Caddy reverse proxy. The PieFed instance is not federated and is more acting like a forum which is meant for a local community within a city. If I do federate in the future, it would be to whitelisted instances from within my physical local community. I am also hosting from behind a Cloudflare Tunnel since my ISP blocks incoming data on lower ports.

I was hesitant to use Cloudflare originally but decided to use it since it was the most suggested recommendation. Now that America and American companies are losing trust world wide, I'd like to explore some other options for tunneling.

Since what I am hosting isn't really meant for a large user base, I am okay with losing some of the security offered by Cloudflare's free tier services. I'll probably look into setting up Fail2Ban and rate limiting to stop a single petty person but that would be something I can do at a later time.

What would be some options to look into when it comes to tunneling behind an ISP with blocked lower ports?

top 13 comments
sorted by: hot top controversial new old
[–] Shimitar@downonthestreet.eu 20 points 2 months ago* (last edited 2 months ago) (1 children)

Rent any low cost vps and setup wireguard tunnel or ssh tunnel to it with port forward, done.

Check https://wiki.gardiol.org/ where I detail my setup which is exactly this.

This page https://wiki.gardiol.org/doku.php?id=networking%3Aexternal_access is a good starting point

[–] Engywuck@lemm.ee 5 points 1 month ago (1 children)

Hey, man... I used to run your LineageOS on Surya until recently. Glad to see you here 😀

[–] Shimitar@downonthestreet.eu 6 points 1 month ago

Cool! We just released 22.2 for surya ;)

Glad to see you here too!

[–] Jason2357@lemmy.ca 7 points 1 month ago

I use a $2 VPS in Quebec that proxies my home stuff over Tailscale. It uses Caddy and does the TLS encryption and caching. It has the providers DDOS protection, plus I have configured the firewall to have some further protection.

It could also just directly forward TLS packets over any sort of VPN if you didn’t trust the VPS provider or wanted to reduce cpu load.

[–] afk_strats@lemmy.world 7 points 2 months ago (1 children)

Look into a VPS + pangolin or headscale Also, check out Crowdsec

[–] comrade_twisty@feddit.org 3 points 1 month ago (1 children)

Pangolin is amazing and completely replaced cloudflare tunnels for me.

I have a cheap VPS at Infomaniak that handles a boatload of traffic with no issues whatsoever.

[–] dfense@lemmy.world 1 points 1 month ago

Can second Pangolin, switched from cloudflare tunnels to it a couple weeks ago and I am very happy with it. Latest version now supports external OIDC!

[–] Xanza@lemm.ee 5 points 1 month ago* (last edited 1 month ago) (1 children)

Pangolin.

Only complaint is that it uses Traefik instead of Caddy.

[–] ThugLaTaupe@lemmy.world 3 points 1 month ago

It looks very good, and you can use crowdsec with it!

[–] towerful@programming.dev 3 points 1 month ago

Chisel, Rathole, an SSH tunnel with port forwarding, a VPN with port forwarding.
Keywords are "self hosted tunnel" or "reverse proxy over VPN".

Run a VPS for like $5 a month, your local reverse-proxy tunnels out to the VPS, and your VPS forwards port 80/443 over the tunnel to your reverse-proxy.

[–] broton33@lemmy.world 2 points 2 months ago

ngrok is a straightforward, powerful, and secure option. Check it out! I run it for my k8s cluster at home.

[–] ohshit604@sh.itjust.works 2 points 1 month ago* (last edited 1 month ago)

My ASUS WRT router running Merlin firmware offers to host a WireGuard server, I simply use the WireGuard app, dump the config file in and hit connect.

Took a little configuration but eventually got it working how I want it.

Edit: Reason for the Merlin Firmware is because I can route my VPN server through my VPN provider, goes a little like this;

5G/LTE > WireGuard to my router > Router routes that connection to ProtonVPN

This gives me access to the resources in my home while also reaping the benefits of my VPN provider.

[–] HelloRoot@lemy.lol 1 points 1 month ago

I run frp but I also like Pangolin