This is for Gentoo but very applicable to your case as well:

https://wiki.gardiol.org/doku.php?id=gentoo%3Apip

Thanks!

Thank you! This is really interesting, will look into it.

I have heard of headscale, and agree that would fix my allergies.

But I don’t have a use case for that either, so…

Maybe in the future, who knows.

Thank you, I am allergic to tailscale (joking).

I already selfhost lots of stuff for family and friends using reverse proxy+https a public domain(s) and a VPS tunneled back (wireguard) home since I am behind CGNAT. And authelia on top of it all.

My setup should be safe enough also for a Lemmy instance.

Ok, indeed, will go with latest for sure, thanks

Thanks! I have a more powerful hardware than a pi, how is it about bandwidth?

I will have two, maybe three users.

No please, hover links are just useless to tablet and mobile users, anybody without a mouse actually!

Mostly not being dependent from a specific vendor, that’s all.

I prefer to use a VPS of my choice that I can replace when I want or need to.

As far as its backed by wireguard its safe enough I guess.

Stop spreading FUD. Syncthing for Android is very well supported and, while the official client will not have updates, there are other clients that are actively developed.

Sorry third post. Trying to summarize.

1. Get external access. Either via port-forward (you lucky American) or via VPS+ssh-tunnel or VPS+wireguard. Stay away from an hard dependency like tailscale and cloudflare (my personal opinion).

2. Setup a reverse proxy with SSL certs via let’s Encrypt (don’t go wildcard, no need to, just add complexity)

That’s the concept, implementation requires clearly extra steps…

See my wiki (https://wiki.gardiol.org/). O describe both the simple and the complex solution. But to be honest, the complex solution is not fully described yet.

If you need also external access, because you are behind a CGNAT or in general have no public IP at all, get a VPS and setup some tunneling.

I don’t like tailscale/cloudflare dependency so I have a different solution.

I have documented it all here: https://wiki.gardiol.org/

Slap a good reverse proxy in front of it (nginx I what I use) and set it up with HTTPS using let’s Encrypt. For added layer of security setup also some SSO like Authelia.

Or just go the VPN way but then, that will not be access from internet, only via VPN, only you will be accessing it.

Thanks, good to know alternatives to Lemmy.world!

Nothing against .world, but variety and alternatives are the gist of lemmy.

Thanks for the podman restart suggestion!

healthchecks.io seems not free or at least, very not open?

Nice tool! Simple to setup and pretty lightweight. It seems it cannot restart services tough, not monitor them specifically…

First copy on offline USB disk on my server itself. Disk is turned on, backup done, disk goes off. Once a day.

Second copy on a USB drive connected to an OpenWRT router of my home, the furthest away from the server (in case of fire, I could be able to grab either of the two).

Third copy offsite on a VPS.

I use restic & backrest with great satisfaction.

Amazing, thanks, will try it out!