this post was submitted on 18 Oct 2023
1 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
1
Setting my VPS to only accept connections through OpenVPN (alien.top)
submitted 1 year ago by MrPejorative@alien.top to c/main@selfhosted.forum
2 comments fedilink hide all child comments
 

I have a simple VPS with OVH. I installed OpenVPN and use that for all my VPN needs. The external firewall is set to basically block everything except my home IP which I use to ssh into. However, I would like to now run some basic services like taskwarrior, etc that I can access remotely with my laptop and phone.

To keep security simple I thought I could just connect to the VPN, and only allow access to the web server, taskwarrior etc when I'm connected through OpenVPN.

I thought this would be obvious to set up, but so far, I've not succeeded. Also, is my method actually secure, or should I be doing something differently?

top 2 comments
sorted by: hot top controversial new old
[โ€“] MistiInTheStreet@alien.top 1 points 1 year ago

I'm not sure what challenge you're facing.

You mentioned that a firewall is configured on the VPS. So, if the firewall is configured properly, it should prevent anyone from accessing your services.

The only problem I can foresee is if you are using Docker. This tool tends to ignore the firewall because of how it works with iptables. If you're running your container without bridge mode, just expose your port to the localhost only, and you should be good to go. Cheers

[โ€“] silly-beyond-me@alien.top 1 points 1 year ago

Try Tailscale.