That was a good read!!
Matrix 👉 @danny:radiantfig.fyi
- 0 Posts
- 4 Comments
- fozid@lem.radiantfig.fyitoTechnology@lemmy.world•How a joke domain purchase turned in geopolitical warfareEnglish28·10 days ago
- fozid@lem.radiantfig.fyitoSelfhosted@lemmy.world•Do you participate in this hobby without a formal IT education or a career in a similar field?English1·14 days ago
Ive been self hosting for years, have a 24/7/365 web server public facing, with 20+ services hosted, including a Lemmy instance. No formal education, qualification or any actual experience in any way. Never had a single course or anything. I work as a commercial manager on complex and large infrastructure construction and engineering projects.
- fozid@lem.radiantfig.fyitoSelfhosted@lemmy.world•Ways to Expose Services PubliclyEnglish1·23 days ago
A reverse proxy is the traditional safe route. Use a web server like Apache, nginx or caddy, and setup to reverse proxy all your services through port 443, and use let’s encrypt and certbot to generate and manage TLS certificates.
I host around 15 public facing web services this way using nginx.
Just be aware, this is very public facing so server security and hardening is important. Things like strong passwords, disabled root, use ssh keys instead of passwords, setup fail2ban, setup crowdsec etc.
The more modern safer way is not to truly expose to full public and use things like tailscale or cloudflare tunnels. But this relies on 3rd party servers and I’m not a fan of that, but it does bring benefits.
Any time