Homelab

371 readers

9 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 1 year ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news

Why do I have such relative ease of exposing services over the internet compared to others. (alien.top)

submitted 1 year ago by acbadam42@alien.top to c/homelab@selfhosted.forum

14 comments fedilink hide all child comments

I'll admit I've only really been doing all of this fun self-hosting stuff for about 4 years now but I have been learning computer since Apple II. With my local fiber internet I have a static IP address and seem to have no barriers to expose my hosted websites to the internet. I've never used cloudfare and can't imagine why I would need it. Use NGINX reverse proxy manager at both home and work. Some people have to jump through all these hoops and I'm just curious to know what situations necessitate all the extra hassle.

you are viewing a single comment's thread
view the rest of the comments

[–] sysadminafterdark@alien.top 1 points 1 year ago (3 children)

You use Cloudflare to proxy, or in other words, hide your IP. Anyone can hit your DNS records, grab your IP and start DDOSing or hacking on it. They also have some nice features to force security features like HSTS or WAF rules. I’d recommend looking into it, not proxying your public IP is an amateur move. As for using NGINX proxy manager, consider using standalone NGINX and writing your own configuration files. There’s a pretty big security issue with it the lead developer refuses to patch.

[–] SirLagz@alien.top 1 points 1 year ago (2 children)

Link to said security issue would be nice so we know what to look out for

[–] sysadminafterdark@alien.top 1 points 1 year ago (1 children)

Why not use the phone already in your hand to look it up? There are several multi thousand upvoted threads on this platform about it.

[–] SirLagz@alien.top 1 points 1 year ago

Is it this one - https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2640 ?