Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by moritonal | Hacker News Reader

Full thread

moritonal·

* Buy a domain as Domain

* Buy a Asustor AS5304T as NAS

* Setup CloudFlare on Domain

* Setup services as docker containers on NAS

* Setup CloudFlare tunnel into NAS docker services with auth in CloudFlare

* Enjoy services.

Note, if any of that sounds hard I must kindly point out that you're playing a risky game trying to do all this yourself securely and should evaluate whether it's easier to just pay a service for all this.

View on HN

> Note, if any of that sounds hard I must kindly point out that you're playing a risky game trying to do all this yourself securely and should evaluate whether it's easier to just pay a service for all this.

You articulated something I couldn't: an important goal for me is to know enough to be able to evaluate such risks and decide which things to hobbyist tinker and which things to pay to outsource.

My Dad once showed me how the moment he opened a port on our domestic router four different attempts to hack us were made. Good lesson for living on the net, here be dragons.

Can you explain your second last star?

I think he means that you don't point your domain's public DNS records straight to your home IP (where your NAS sits), but rather via Cloudflare.

If so, doesn't Cloudflare do HTTPS termination? Meaning that all your photos would be visible to them during transit.

I plan to write a blog about this. But the gist is that CloudFlare lets you host a service locally which creates a port tunnel between a domain on their platform and your box. This handles a lot of things, such as 2-factor auth, floating-IPs and TLS. So you visit "home-git.example.com" and CloudFlares routes that to your homebox.

Reply on news.ycombinator.com