this post was submitted on 01 Dec 2023
0 points (50.0% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
0
Reverse Proxy only allowing DynDNS-IPs as alternative to VPN? (alien.top)
submitted 9 months ago by Simplixt@alien.top to c/main@selfhosted.forum
2 comments fedilink hide all child comments
 

Hi all,
I have the following challenges:
- I have friends and family that want to access my services
- But they cannot / don't want to install any VPN
- But I don't want to open my services to the complete internet

My idea: It's good enough, if they can access the services at home. They have internet provider with dynamic IP address. In the router, you easily set a DynDNS-Service.

So: Why not just have a rule, that only allows connections of the IP-addresses of the DynDNS-Domains. Of course, the proxy/firewall would recheck the DNS entry regulary.

Someone has tried such a setup? What solution are you using? Do you think it's similar secure as a VPN? (of course HTTPS connections only via Letsencypt cetificiate)

you are viewing a single comment's thread
view the rest of the comments
[โ€“] IllegalD@alien.top 1 points 9 months ago (1 children)

It sounds like your friends and family are actually the administrators of your network ๐Ÿ˜

[โ€“] Simplixt@alien.top 1 points 9 months ago

Haha, for my parents it's better to change an unvisible setting in the router, instead of placing a raspberry pi in their network or installing WireGuard on every device. They are paranoid with any software that must be installed :D