lambchop

joined 2 years ago
[โ€“] lambchop 1 points 2 years ago

Yeah that's it. Yeah anything that needs api access needs it not on that bit, and anything with a mobile app can't have it either ๐Ÿ˜ข

[โ€“] lambchop 6 points 2 years ago* (last edited 2 years ago) (3 children)

Google cloudflared tunnels, zeroteir and tailscale. They all solve this exact problem, I've been using cloudflared tunnels to host without exposing my ip for while now, it's relatively easy for https services.

Edit: also just because services require login, doesn't necessarily make them secure if their implementation is terrible. It's best practise to use a reverse proxy like nginx which specialises in having not shit security for authentication, and proxy your services behind it.

[โ€“] lambchop 2 points 2 years ago (1 children)

I'd recommend using a reverse proxy even if you just have 1 service. The swag container from Linuxserver is good, nginx proxy manager is probably the easiest, both automate the cert and renewal

[โ€“] lambchop 1 points 2 years ago* (last edited 2 years ago)

This is the only correct answer, the other responses about only showing local ip, and hosting something that goes through a VPN are either wrong or don't result in a working configuration. A domain must resolve to an IP so connecting out via a VPN just won't work. Proxying your connection through cloudflare using cloudflareD tunnels is the answer. Users will only see the ip of cloudflare.

[โ€“] lambchop 5 points 2 years ago

Holy neon that's colorful

[โ€“] lambchop 5 points 2 years ago

This smells like the Opal towers

[โ€“] lambchop 2 points 2 years ago (1 children)

Sweet hadn't heard of this before. Do you know of a docker implementation?

view more: โ€น prev next โ€บ