this post was submitted on 25 Aug 2023
12 points (87.5% liked)

Selfhosted

40180 readers
1487 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I've managed to set up a baikal server to sync my calendars and tasks instead of using a free cloud service provided by nextcloud. I'm able to reach it from beyond my local network, but this is all very new to me and I'm a little worried about what permanently leaving a port open for this.

I'm hoping to find some resources for securing this, before leaving it up all the time. I suppose as an alternative I can always only run it at home and only sync when I'm home but this seems less ideal.

Thanks a bunch for the help in advance. I really appreciate it.

you are viewing a single comment's thread
view the rest of the comments
[–] wildbus8979@sh.itjust.works 1 points 1 year ago (1 children)

There are a number of options...

Setup a reverse proxy with nginx, using SSL, with http auth or better yet client certificates.

Setup a VPN to access your home network.

Use SSH forwarding to access the local service.

[–] Corr@lemm.ee 1 points 1 year ago (1 children)

Are these all roughly equivalent in security? Or is it a case of some of these being a bit less complex to set up but you sacrifice security? I'll look into these options though. Thank you

[–] wildbus8979@sh.itjust.works 2 points 1 year ago

If setup correctly they are mostly equivalent.