this post was submitted on 25 Mar 2024
150 points (96.9% liked)

Selfhosted

40382 readers
373 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
150
After some trial and error, I've managed to successfully deploy public instances of privacy-respecting services! (reallyaweso.me)
submitted 8 months ago by AlexPewMaster@lemmy.zip to c/selfhosted@lemmy.world
40 comments fedilink hide all child comments
 

Hi, you guys might know me from these three posts. After reading all of the comments, I've decided to purchase a Mini PC to host public instances of privacy-respecting services.

I'm here to bring some good news: I got it working perfectly! You can visit reallyaweso.me today and get a list of services that I'm hosting!

All services are deployed via Docker and proxied through Cloudflare. You might ask: "Why Cloudflare?". It's because I can't port forward things on my home network. It really sucks that I'm depending on Cloudflare to do the port forwarding for me, but it is what it is.

If you want me to host a specific service that you want, feel free to comment on this post!

I would really appreciate it if you guys could checkout some services that I'm hosting, as I don't know if everything went smoothly or not. Thank you guys so much for helping me on this journey!!

you are viewing a single comment's thread
view the rest of the comments
[–] nutbutter@discuss.tchncs.de 18 points 8 months ago (14 children)

I wrote a small blog about bypassing CGNAT using TLS-passthrough. Cloudflare uses TLS-termination, which means they can see all the data being passed through, which defeats the purpose of privacy.

https://blog.aiquiral.me/bypass-cgnat

[–] SwissOS@sh.itjust.works 2 points 8 months ago (1 children)

The problem with such a situation is that you have no idea of the origin IP address, as all the requests look like they are coming from your VPS. Did you find a way to restore origin IP in your logs?

[–] nutbutter@discuss.tchncs.de 1 points 8 months ago (1 children)

Yes, it is fairly easy. You just have to forward the http headers. I am using HAProxy, and you can look at my configuration file in the blog. If you're using something like Nginx Proxy, look up how to forward http heards. Some applications, like Nextcloud, require extra steps, but they also provide their own documentation.

[–] SwissOS@sh.itjust.works 0 points 7 months ago (1 children)

Ok for http trafic, but what about SMTP?

[–] nutbutter@discuss.tchncs.de 1 points 7 months ago* (last edited 7 months ago) (1 children)

All ports are forwarded. If your SMTP is running on, say, port 993, on your local machine, your-VPS-ip:993 will be your SMTP.

[–] SwissOS@sh.itjust.works 1 points 7 months ago (1 children)

Sorry for the late answer, but will your SMTP logs show the original IP or the VPS'?

[–] nutbutter@discuss.tchncs.de 1 points 7 months ago

Not sure. Will have to try it out.

load more comments (12 replies)