this post was submitted on 10 Jul 2023
2 points (100.0% liked)

Selfhosted

39964 readers
317 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

Hi folks, I'm just getting into this hobby thanks to the posts in this community. So far, I've installed Ubuntu server 22.04 on an old laptop and got paperless working, and I'm pretty pumped. Now I would like to access it outside of my home network on my phone.

I have a Netgear R7000 with Advanced Tomato installed. Here's my plan, but I don't know if it would work... So I'm hoping for a peer review of sorts.

  • Get openVPN working on the router as a server.
  • make a certificate for my phone and use it as a client.
  • use my fedora laptop as the CA (?).

I think I need to use easy-RDA to make the keys and certificates...

Does that sound about right? It's this a good approach or is there something better/easier/more effective?

If there's a great tutorial around for accessing the home network externally, I'd super appreciate it. Would obviously prefer to do it myself and not pay for a service... I've been enjoying the learning experience!

top 17 comments
sorted by: hot top controversial new old
[–] CeeBee@lemmy.world 2 points 1 year ago (2 children)

Tailscale

That's the only word you need. Ultimately, traditional VPN is outdated and almost obsolete. Wireguard is the "next iteration" of network tunneling tech. And Tailscale just makes it super simple.

[–] RelativeArea0@lemmy.world 1 points 1 year ago (1 children)

Omg its seems its working with cgnat, ill give this a try

[–] zampson@lemm.ee 2 points 1 year ago (1 children)

It's what I use to remote access to my Starlink network. Have it running on a little Linux box, and publishes my internal subnet so I can access any device on my network with Tailscale running on just one PC.

[–] RelativeArea0@lemmy.world 1 points 1 year ago

Neat, I'll admit that im a bit late with vpn bandwagon, I've been fiddling around with dynamic dns and prays to the network gods that my LAN wont encounter some replicating malware or nasty stuff (although im monitoring it and has logs). And yea, wow, this thing is fast and easy.

[–] ablackcatstail@lemmy.goblackcat.com 0 points 1 year ago (7 children)

+1 for Tailscale because it uses the WireGuard protocol. Tailscale just adds additional features on top of the WireGuard base. That much said, I am more interested in Slack's Nebula project because it is completely open source. I like the approach Nebula is taking towards mesh networking. I'm just still struggling to get it working.

load more comments (7 replies)
[–] thejoker8814@lemmy.world 2 points 1 year ago

I know it’s been mentioned before - but plain Wireguard is my way to go. KISS - keep it simple, stupid! setup might be a little bit of a learning curve, but once you got it for one device, others aren’t a big issue.

I had a CA, with OpenVPN, but that’s to much for a small setup like remote access to your home network.

Use it on iOS, Ubuntu and Windows to access my home services and DNS (Split-Tunnel).

It’s a pretty easy setup on OpenWrt. A quick look into the fresh tomato wiki tells me, that it shouldn’t be to complicated to achieve on your router (firmware). If you need help with setting Wireguard up, let me know, I’m happy to help out.

[–] CeeBee@lemmy.world 1 points 1 year ago

Tailscale

That's the only word you need. Ultimately, traditional VPN is outdated and almost obsolete. Wireguard is the "next iteration" of network tunneling tech. And Tailscale just makes it super simple.

[–] Drudge@lemmy.world 0 points 1 year ago (1 children)

Big thanks to everyone that replied. Message received: ditch openVPN in favour of wireguard :-)

[–] Drudge@lemmy.world 0 points 1 year ago* (last edited 1 year ago) (1 children)

Uhm, status update: I just signed up for tailscale, and I'm able to access my home server after about 2 mins from first logging into the tailscale website. Wow...you guys weren't kidding 🙃

So what should I do next?

[–] Bread@sh.itjust.works 1 points 1 year ago (1 children)

Nas, Media server, device auto backups to nas, game server, chatgpt instance, Lemmy instance, a website, wiki, nextcloud, pihole, or home assistant.

If you intend to collect/store data or make more servers, a nas would probably be a good idea to have.

[–] Drudge@lemmy.world 2 points 1 year ago

Ok, I have an incoming Lenovo M93P SFF to upgrade my really old laptop as a server, so your list will be super helpful. Thanks!