My ISP is charging $20/mo for static IP’s, so almost any other solution would be cheaper.
I hate Oracle with the passion of a thousand suns, so I don’t want to touch them with a 10ft pole. I would happily pay anyone else to avoid using anything affiliated with Oracle.
Thanks for the warning. My Plex server is currently behind a Cloudflare tunnel, so I probably need to look at moving that.
I mistook pangolin for netbird, so thanks for the clarification!
I use NPM internally for SSL. DuckDNS won’t work for me since I am behind CGNAT. I also already own a domain.
I would like to avoid paying for a VPS. I probably should have clarified in my post too that I am specifically looking for advise on securing public facing services. While I certainly could make everyone use a tailscale-like service, at this point I think securing an external service would be easier. Especially since most of these people would not be tech savvy and I don’t particularly want to play tech support for their VPN.
I haven’t looked into Asahi Linux in a while now, but I figured the experience would be pretty good by now. You don’t need to “hack” anything to get it to run. Last I read, there were just a few driver issues, but I haven’t looked into it in probably 2-3 years now.
Apples implementation of SMB has always been abysmal. I’ve been using Mac’s for close to 20 years now, and connecting to SMB shares has always been a pain. IMO, it’s gotten better recently (since they dumped AFP and were forced to work better with SMB). For whatever reason, it has always been slow to connect through Finder. Not sure there has been much progress on that front…
Really makes you wonder what Apple uses internally, because it must not be SMB!
There is an iOS/macOS app called “Pi-hole Remote” that can manage multiple PiHole instances at once. I use that because it will make changes on both instances at once for me.
Other than that, I log in to each device and copy paste.
These contracts do not stipulate reimbursement for lost revenue. The “uptime guarantee” just gets you a partial discount or service refund for the impacted services.
It is on the customer to architect their environment for high availability (use multiple regions or even multiple hyperscalers, depending on the uptime need).
Source: I work at an enterprise that is bound by one of these agreements (although not with AWS).
I’ve tried both Unraid and TrueNAS. While I greatly prefer TrueNAS, Unraid is much easier to set up and get going for beginners. It’s been a while since I’ve set up TrueNAS from scratch, but last I tried, it wasn’t a very beginner friendly experience. If you weren’t already familiar with ZFS, you were in for a pretty difficult time.
I’ve never used your exact setup, but I have had issues with a web server behind a WAF not getting the client IP (all user traffic was shown as the WAF IP). In my case, the WAF was appending the client IP in a header, and I just had to tell web app to use that header as the client IP instead of the actual IP. Again, not sure if this helps since I have never used podman or caddy (this setup was with Wordpress and an Azure Application Gateway) but the same principles might apply.
I previously had a QNAP, and they honestly aren’t much better than Synology. I would definitely go the build your own route. For the OS, I really can’t recommend TrueNAS more. I’ve been using it for years and it is rock solid.
They mention in the post that other apps are coming soon. If they start letting you self host Protect, that will be huge. When they killed off Video, the only way to get their cameras to work was to buy their hardware that could run Protect. I was shocked when they allowed you to use 3rd party cameras in Protect.
What’s the difference between the two? Reading the GitHub for meshcore, it sounds exactly like meshtastic. What makes it better?
I have just recently started messing with Authentik. And I can confirm OIDC claims and whatnot are an absolute nightmare. I have some experience setting up SAML stuff from my work, but I only do that if our main guy is out and I always struggle with it there too.
Your setup sounds the most like what I am doing now, minus the DMZ. But all of my containers are rootless. I am running everything on TrueNAS right now.
I think I will lean more on Authentik, as the provisioning of users and giving them access to services through that is very easy. I will probably stick with Cloudflare for the time being, but I will look more into Pangolin.