this post was submitted on 11 Jul 2025
181 points (96.4% liked)

Selfhosted

59939 readers
649 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam.

  3. Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.

  4. Don't duplicate the full text of your blog or git here. Just post the link for folks to click.

  5. Submission headline should match the article title.

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
181
submitted 11 months ago* (last edited 11 months ago) by sbeak@sopuli.xyz to c/selfhosted@lemmy.world
 

Today I set up my old laptop as a Debian server, hosting Immich (for photos), Nextcloud (for files), and Radicale (for calendar). It was surprisingly easy to do so after looking at the documentation and watching a couple videos online! Tomorrow I might try hosting something like Linkwarden or Karakeep.

What else should I self-host, aside from HA (I don’t have a smart home), Calibre (physical books are my jam), and Jellyfin (I don’t watch too many movies + don’t have a significant DVD/Blu-ray collection)?

I would like to keep my laptop confined to my local network since I don’t trust it to be secure enough against the internet.

edit: I forgot, I’m also hosting Tailscale so I can access my local network remotely!

you are viewing a single comment's thread
view the rest of the comments
[–] madcaesar@lemmy.world 3 points 11 months ago (1 children)

How safe is it to self host something that you open up to the web? I've been thinking about a keepass self host, but I need it to be accessible from anywhere... I'm just really worried what that does once you open up your local server to the world

[–] KarnaSubarna@lemmy.ml 2 points 11 months ago* (last edited 11 months ago)

If you want to expose a container based service just for yourself over internet, you can -

  • If you have static IP4 or IPV6 - Setup Wireguard VPN on your homelab/server, and wireguard client on client devices[1].

  • If you are behind NAT or CGNAT - either Cloudflared Tunnel[2] or Tailscale[3].

In either scenarios, you need to setup firewall of your server to allow connection from LAN to port of your docker container/services. By default you should set your firewall to block all incoming request from anywhere except LAN.

I'm personally using Cloudflared Tunnel, but planning to migrate to Tailscale.

[1] https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-ubuntu-20-04

[2] https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/

[3] https://tailscale.com/