A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Hello,
just wanted to share that I have successfully hosted copyparty instance behind cloudflare on my porator laptop :D
you can use it to share memes or use it as temporary storage, I don't have any idea of how to manage a public facing service but I will figure it out.
Take. It. Down.
Do you know how much CSAM was on Lemmy when it first got started?
This kind of service should be open for friends and family only, NOT the whole wide world.
But I want to learn how to host things and manage services without opening it to public how would I know if I am capable enough.
Also what else do you suggest to host? I have some experience but don't know much
You are ignoring people who have walked this path and are giving you the advice right now.
Public file hosting is not where you start.
you start with authenticated things, like forgejo and such, and always double check that anonymous visitors don't see any data.
but generally it's also not wise to just expose most services to the internet. jellyfin for example had lots of leaks because lots of API functionality was accessible without authentication. I don't know if it's been fully fixed.
expose a wireguard, it is safe, it is security software, and access everything else through it. you can keep using your domain for internal services.
with copyparty there's an added risk. if police finds you hosted child porn, they won't care if it wasn't you who uploaded it. someone reports it to them, they steal all your computers, worst case you can even end up in jail.
Pro-Tip: You can reverse proxy any service on your network but if the IP of your reverse proxy does not match the IP of your A record, aka your server is behind a VPN, the public will not be able to access your server.
Http/s is neat that way, if the IP’s don’t match then it’s technically considered an insecure or misconfigured setup but it works great to prevent unauthorized access to one’s server.
I must agree with other users here, hosting a public file hosting server is a bad idea, at the bare minimum Authentik or Keycloak should be in front of it but I digress, https://catbox.moe/ already endures this pain for us.
Not sure what reverse proxy you’re using but alternatively Traefik’s middleware
IPAllowListworks great for blacklisting all IP’s and only whitelisting the known few.