when I want to expose an app running on my home-network:
when you are self-hosting at home, and you want to give friends access to your jellyfin, whats your preferred way of doing this? My focus is on security, but I'm not an expert on this.
Right now, what I have done is, I set up pivpn with a firewall that exposes only the jellyfin ip/port, so that other stuff on my network isn't available to connected users.
However, their whole internet traffic would go through my network now (if not split-tunneled), unless I restrict internet access, which would also be a dick move of me to people who forget to switch off the VPN 😆
I was now thinking about setting up a reverse proxy, instead of this whole VPN idea.
How is the security when I'm using a dynamic DNS, that points to my home-network, where I'm using a reverse proxy to catch the requests and expose only jellyfin? How is the security level of a reverse proxy vs vpn?
Looking forward to reading opinions and ideas!
#selfhosting #reverseproxy #raspberrypi #pivpn #dynamicdns #itsec #itsecurity #jellyfin #apache #nginx
Nikhil 🐧 /
npub1le…psjy4
2024-06-16 09:33:05
Author Public Key
npub1le2zm87hgfvcr7gan70zd2n45w4utuh5qrcpy7gk0w84ff9g36yq9psjy4Published at
2024-06-16 09:33:05Event JSON
{
"id": "6221829a9de49813aa53c599d522bc1b628b35d529d0c00900bae10c1728e115",
"pubkey": "fe542d9fd7425981f91d9f9e26aa75a3abc5f2f400f01279167b8f54a4a88e88",
"created_at": 1718530385,
"kind": 1,
"tags": [
[
"t",
"nginx"
],
[
"t",
"raspberrypi"
],
[
"t",
"selfhosting"
],
[
"t",
"pivpn"
],
[
"t",
"dynamicdns"
],
[
"t",
"itsecurity"
],
[
"proxy",
"https://social.linux.pizza/@realestninja/112625607314177296",
"web"
],
[
"t",
"itsec"
],
[
"t",
"apache"
],
[
"t",
"reverseproxy"
],
[
"t",
"jellyfin"
],
[
"proxy",
"https://social.linux.pizza/users/realestninja/statuses/112625607314177296",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://social.linux.pizza/users/realestninja/statuses/112625607314177296",
"pink.momostr"
]
],
"content": "when I want to expose an app running on my home-network:\n\nwhen you are self-hosting at home, and you want to give friends access to your jellyfin, whats your preferred way of doing this? My focus is on security, but I'm not an expert on this.\n\nRight now, what I have done is, I set up pivpn with a firewall that exposes only the jellyfin ip/port, so that other stuff on my network isn't available to connected users.\n\nHowever, their whole internet traffic would go through my network now (if not split-tunneled), unless I restrict internet access, which would also be a dick move of me to people who forget to switch off the VPN 😆\n\nI was now thinking about setting up a reverse proxy, instead of this whole VPN idea.\n\nHow is the security when I'm using a dynamic DNS, that points to my home-network, where I'm using a reverse proxy to catch the requests and expose only jellyfin? How is the security level of a reverse proxy vs vpn?\n\nLooking forward to reading opinions and ideas!\n\n#selfhosting #reverseproxy #raspberrypi #pivpn #dynamicdns #itsec #itsecurity #jellyfin #apache #nginx",
"sig": "5b00275576b2c55c562476986217995e7dee430ee7b47c4a93aa97ed8ffc28867390ce8e680069a6a199601b46e168eb1e1173e42d5ee40013079d6c247b3912"
}