Selfhoster1728

joined 1 month ago
[–] Selfhoster1728@infosec.pub 2 points 5 days ago

yep

In my opinion it's the best solution because there's a really low attack surface plus it makes it easy to control which device has access to which services.

[–] Selfhoster1728@infosec.pub 1 points 5 days ago (2 children)

Not any in particular but mTLS is essentially just a reverse proxy (like nginx) asking a client for a certificate to be able to access the service behind it.

There are quite a few guides out there, so choose one for your reverse proxy of choice!

[–] Selfhoster1728@infosec.pub 1 points 5 days ago* (last edited 5 days ago)

Tailscale is simpler but when you're accessing from devices behind VPNs like I do mTLS is a lifesaver.

I use DAVx⁵ for caldav (supports mTLS)

I find mTLS cool too :P

In terms of being a pain it's not that bad with nginx in my opinion. I can just build my own certificate for each service I expose or you use a common one, giving read only access to the key for my nginx containers and in two lines in the .conf it's sorted.

[–] Selfhoster1728@infosec.pub 3 points 6 days ago (6 children)

mTLS with a reverse proxy!

[–] Selfhoster1728@infosec.pub 6 points 1 week ago (1 children)

How exactly does stuff get broken? Never rly had a problem bumping up the version in docker. The only issue has been the playstore version taking longer to push updates sometimes for the mobile apps.

[–] Selfhoster1728@infosec.pub 2 points 3 weeks ago

I have a project on Forgejo and I've needed to set up a runner for compilation but I've been very confused so far on how everything works.

All I've been able to do is make a runner and connect it to my Forgejo instance, but I didn't really know what to do from there.