← Back to context

Comment by turtlebits

4 days ago

Self hosting is great. The access part is hard.

Pangolin was the missing piece I needed, to not expose my servers to the internet and easily have my services publicly accessible with built in auth.

Tailscale kind of worked, but it was a hassle needing the client on mobile device and it being a VPN.

With vibe coding, I have more of my own apps running than pre-built.

9 comments

turtlebits

Reply
bubblemoth  4 days ago

Wireguard is relatively simple. The VPN on my phone automatically connects when I disconnect from my home wifi, then it's like I'm at home.

  • theoreticalmal  3 days ago

    Pfsense and maybe openwrt allow split horizon DNS that allows Wireguard tunnels to work seamlessly whether you’re on or off your home network. Took me years to figure out but it’s what I use now

  • turtlebits  4 days ago

    Not requiring friends/family to use a client to access my services is so much simpler.

    I also use Adguard which act a VPN to filter traffic. I dont feel like messing around to get both working.

    • cromka  3 days ago

      I use Brave and never had a kneed for AdGuard, specifically because of how it uses VPN. Then I use Wireguard to seamlessly access my home setup. Honestly, I choose security and very little admin anxiety over random ads in other, non-browser apps or sites.

  • ycuser2  3 days ago

    That's a cool feature. Do you run Android? How did you set this up?

    • hammycheesy  3 days ago

      I'm not the user you replied to, but I run a similar set-up using "WG Tunnel," which is available on F-Droid and the Play Store.

      You can configure a WireGuard tunnel to auto-connect when you are not on a set list of "trusted networks."

  • spacephysics  4 days ago

    Why the downvotes? Genuinely curious, I do this and don’t know of a downside after setup (with help from {AGENT})

Hikikomori  3 days ago

Cloudflare zero trust also works for this, nice if you already use them for DNS and proxy. You install cloudflared tunnel, expose select ports as a service in zero trust, then whitelist email addresses that can log in to zero trust and when they a one time password to log in when they try it. When logged in you get a page showing the services available as clickable links.

Vibe coded a python script to configure Cloudflare, it just looks on docker annotations so I can select which containers to expose.