@K3can@lemmy.radio

K3CAN

Also at @me@social.k3can.us on Mastodon.

member since 21 Jun 2023 13:40

comments

TinyWebGallery?

www.tinywebgallery.com/en/demo2.php

on please recommend a simple selfhosted photo gallery in c/selfhosted@lemmy.world · 4d ago
If you’re talking about remote access specifically, I use tiers.

“Public” is open, but goes through crowdsec and anubis, and is on a DMZ network. This is my website, blog, Fediverse, etc.

“Private” is either secured with mtls or wireguard. This is stuff that’s only for me or family, like media or home assistant.

“Sensitive” is wireguard only. This is infrastructure management, Paperless, etc.

on How "secure" is your setup? in c/selfhosted@lemmy.world · 17 Sep 2026
Rsync.

You could leave the drive plugged in and schedule a daily/hourly sync, or you could have the system trigger a sync whenever you plug the drive in.

on Software for Syncing files between storages (Linux) in c/selfhosted@lemmy.world · 17 Sep 2026
Oh, maybe I misunderstood? It sounded like he didn’t understand what advantage a “tunnel” could provide.

If your server is behind CGNAT, you need a TURN-style “tunnel” to allow incoming connections. If you have your own remote server with a public IP, then you can absolutely use that and create the tunnel using wireguard (or openvpn, ssh, etc).

I just mentioned CF in my blog post because it’s probably the most popular solution.

The point is, if you have CGNAT, you need to create that “tunnel” somehow if you want to allow incoming connections.

on Replacing Cloudflare Tunnel with a Selfhosted Towonel Tunnel in c/selfhosted@lemmy.world · 1 Sep 2026
That’s exactly the use case for “tunnels”: allowing public, incoming connections behind CGNAT.

Wireguard requires a public IP on at least one side of the connection and only allows private access. If you want to host a blog or website AND you’re behind CGNAT, then a “tunnel” service is a very easy solution.

Edit: my previous blog post on the topic: blog.k3can.us/posts/…/2025-02-21_cloudflarefort/

on Replacing Cloudflare Tunnel with a Selfhosted Towonel Tunnel in c/selfhosted@lemmy.world · 1 Sep 2026
I use mTLS for Home Assistant and Navidrome.

It’s very secure, the only limiting factor is that the client apps need to support them (or you use a PWA).

on Anybody here does mTLS? in c/selfhosted@lemmy.world · 23 Aug 2026