this post was submitted on 09 Jul 2026
59 points (84.7% liked)

Selfhosted

60589 readers
1526 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the link in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post. )

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

Hello everyone

Last week I bought a domain with the intention of connecting it to my NAS so I can access my apps over the internet without tailscale (plus give access to a few family members on jellyfin). I did it through clourflare.

I was very naïve but I had no ideal of the sheer amount of learning it would require to achieve the things I'm looking to do (just basic access with some additional authentication). So far I've managed to publish my immich server (behind a authentication screen) but largely still very confused about how its actually working. And very confused about setting up external auth and using reverse proxy. Honestly feeling quite defeated.

I've posted here in the selfhosted Lemmy and you guys have been really helpful but I think I could really benefit from someone showing me and explaining how it works. I have already learnt a lot from last week but the more I learn the more questions I have.

I've taught myself home networking, I knew nothing about it before I built a NAS, but with this I just want to be sure I'm doing it right.

I can pay you. Not heaps but hopefully enough for 20-30 minutes of your time. Not trying to rip anyone off here haha

Thanks for all your continued advice on this

all 22 comments
sorted by: hot top controversial new old
[–] irmadlad@lemmy.world 1 points 1 day ago

Waiting for some good news.

[–] artyom@piefed.social 46 points 2 days ago (3 children)

It's a huge problem that so many people act like it's super easy and simple. It's incredibly complicated to someone who is not a networking professional.

[–] iamthetot@piefed.ca 8 points 1 day ago (2 children)

When I was starting out with selfhosting and stuff, I had tons of issues with networking, reverse proxies, etc. And much of the advice here was not... particularly helpful. I genuinely don't think most people here understand how much they know, and how much comes across as gibberish when they speak to a true newbie. I still see it in this forum all the time for new people. Just the other day someone described themselves as a total newbie, nothing more than Jellyfin running on a Mac locally, and a comment I saw suggested their next step should be running proxmox and setting up VMs and this that and the other service. Like... that's not a good next step.

[–] ampersandrew@lemmy.world 3 points 19 hours ago

When I was given a similar suggestion, I asked why I would need proxmox for my project, and I was told something along the lines of, "Don't discount their usefulness if you're trying to do this as a career." I am not trying to do this as a career. I already have one of those. I'm trying to replace subscription services with something more economical and under my control.

[–] artyom@piefed.social 3 points 1 day ago

I genuinely don't think most people here understand how much they know

That's it, exactly.

[–] pmk@piefed.ca 15 points 2 days ago

This has been my experience with self-hosting too. There are so many different areas of concepts that need to form a cohesive whole. Following a how-to and pasting some commands can lead to something running, but then there are worlds of knowledge to actually understand it. Especially when complexity seems to increase exponentially.
Funny thing is that for every low-level concept I actually learn, the more I appreciate my OpenBSD computer that I mostly play around with otherwise.

[–] gigglez@social.gigglez.net 2 points 1 day ago (1 children)

@artyom I think part of it is that it *is* easy.... when you're working on your own setup, that you built, and know all the components of, and know all the long term goals of, that was built over years piece-at-a-time...

Get anyone who acts like it's easy to work on someone's setup that isn't their own, and they'll quickly remember how complicated it all is.

[–] artyom@piefed.social 2 points 1 day ago

It has nothing to do with whose setup it is and everything to do with an immense amount of specialized knowledge that requires, at the very least, months to even begin to understand to the extent that you can deploy your own server.

[–] MuttMutt@lemmy.world 28 points 2 days ago (1 children)

What are you using as a router? How are you you trying to setup a reverse proxy?

I will be honest, I would do it for free. Money is nice but helping people is more important to me than that. However my understanding is with OpnSense and using Caddy for reverse proxy with the ACME client for Let's Encrypt certificates. Beyond that I am outside of my element.

[–] philanthropicoctopus@thelemmy.club 9 points 2 days ago (1 children)

Hey

That's very kind of you but it'd be nice to give you something.

What I've got installed in NPM, cloudflared and authentik. Just trying to figure out how to use all three or at least 2 to get my apps on the domain. Ive been able to get things moving in the cloudflare dash but I'm aware I don't know alot about what on doing

[–] node815@lemmy.world 6 points 2 days ago

If you are using Authentik, it will work good, but may be uneccessary if all you want is secure authentication, this is becuase Cloudflare does a "Zero Trust" model in which only approved email addresses, would be able to acess your site which you have to manually approve, otherwise, they get hit with the Cloudflare wall. This is completely free and voluntary!

In terms of Cloudflare, I assume that you have your domain all set up with the DNS servers pointed to Cloudflare from your domain registrar. This is probably the hardest part of it all. Then, it's just a matter of setting up your redirection to your server. I used to use them but haven't been in it for about a year now for my domains. They are a good company and will certainly help with your site's security.

Nginx Proxy Manager is like the reception desk for all traffic, when WWW comes in and asks for site.example.com NPM sees that and matches it up with the IP address/port of your server and sends it on it's merry way. If you are using Cloudflare Tunnels, and after you install their tunnel adaptor, you can skip NPM and just point to the IP and internal port on your server. Pretty straight forward in that area. They have great documentation on how to do this to get you started.

Basically, if you use Cloudflare tunnels, you can skip NPM and free up some resources if you want as it will be redundant. So, then Authentik comes in and can act as a traffic cop and protect all types of pages, ones with log in and those without.

[–] SpacePirate@feddit.nu 18 points 2 days ago* (last edited 19 hours ago) (2 children)

Hey! I sent you a DM about it I was thinking we could have a call on MullvadVPNs jitsi aka https://meet.mulvad.net/ where others could join! If we can find a time that works for both of us we could send it here so others who are interested can join!

Edit:

Me and OP have decided on a time and date and where to have the online meeting feel free to join us at 09:00 AM Central European summer Time the 11th of Jul 2026 on Mullvads jitsi via this link https://meet.mullvad.se/home-lab-feddit

[–] mal3oon@lemmy.world 2 points 3 hours ago

Sounds like a first step for a community meeting focused on 1 topic: helping OP set up reverse proxy. Honestly this sounds fun. I hope it went well!

Hey. Thank you so much. I'll message you now

[–] pcouy@lemmy.pierre-couy.fr 9 points 2 days ago

I'm in France timezone so hopefully we can find a time of the day that works for both of us, but feel free to DM me here or on Matrix (@pcouy:matrix.pierre-couy.fr)

[–] Postmortal_Pop@lemmy.world 3 points 1 day ago

Hey if you don't get it sorted, hit me up, I'm in the Chicago timezone and I can give you my docker file and walk you through how I did exactly the same thing you're looking for.

[–] dudeface@lemmy.world 2 points 1 day ago* (last edited 1 day ago)

Happy to help you through it

No need to pay me, I am in UK Timezone if that matters

[–] melroy@kbin.melroy.org 4 points 2 days ago (1 children)

I have the same request but for vlans in my house. I do have supported hardware. But I just still don't get vlans working

[–] ampersandrew@lemmy.world 3 points 2 days ago (1 children)

I don't suppose your issue looks anything like my thread from this past weekend in this here community? And as a reminder, tagged ports face networking hardware, while untagged ports face end devices.

[–] melroy@kbin.melroy.org 2 points 2 days ago

And what if I have a router (like your thread, OPNsense), top-of-rack switch (10G ports) and an access-switch (1/2.5G ports). And then the ports that face end-devices are either on the access switch (that makes sense right) as well as top-level rack switch has connections towards my server machines in my rack.

So its bit more hardware then you initially though, and all devices technically support vlans. SO basically I had two questions in one:

  1. What would be the best VLAN setup for my needs (I expect here some follow-up questions, back and forth)
  2. How can I configurable the VLANs correctly across my various switches, such that it actually works.. So I don't accidentally lock myself out again and needed a SW reset (lol).
[–] ampersandrew@lemmy.world 7 points 2 days ago

Oof, I feel you OP. I started down this road back in February, and I thought I'd be set up by now, but I'm still learning some of the pieces for a project that's almost exactly the same as yours. If it's any consolation, I have made a ton of progress. The hardest part can often be when you've chosen the pieces you want to use for your project, and then a kind stranger who means well adds extra complexity above and beyond what you want or need on top of their suggestion.