Hacker News Reader

Comment by ghusto | Hacker News Reader

I remember home hosting fondly too.

Every so often I think about doing it again, but security paranoia keeps me from it. What if they broke out somehow? I could DMZ it I guess.

View on HN

Tailscale is nice, you don't even need to open any ports to have your device accessible from anywhere. Works really great, literally (!) takes >10 min to set up (on mobile, dl app, log in with 3rd party identity provider (I choose GitHub), on Server, curl some script (will move to apt or yay or dnf when it detects them), click a link, boom both devices can find each other on unique IP addresses.)

I do open ports, for NextCloud (to be able share stuff) and some websites. But Home Assistant is only accessible from the Tailnet for example, as are my ssh servers.

Cloudflare has a similar (free) service as well. It's quite useful.

Excellent, thanks. I've never used Tailscale before.

It's free for the first 20 devices, I guess there is no limit if you want to selfhost the server part (called headscale). They are committed to the free tier though, they wrote a lot about that. I like the company a lot, I hope they don't change. They are very freedom/opensource oriented, for now :)

Once you use Tailscale you realize this is how a VPN should be, it's really something.

DMZ or second IP/connection is the way to go.

It can be a bit tricky with hairpin routing, but you can make the DMZ seem to be "on the internet" even to the home network.

Use tail scale or something similar for actual "access my home network from far away"

I'd recommend running your selfhosted stuff in a VM (or docker) and using tunneling[0] to access it.

[0]: https://github.com/anderspitman/awesome-tunneling

Reply on news.ycombinator.com